SE in Proxmox VM with local bridge and dnsmasq

[fmaione]

Hi all, I have a VM named "main" with debian bookworm running SE 5.01.9674+git20200806+8181039+dfsg2-2+b2 (debian stable), configured with an hub HUB1 with SecureNat disabled and a local bridge with "physical" VirtIO interface ens6p18, enabled IPSec to give access to VPN clients via L2TP. I enabled ipv4_forwarding. no iptables configuration.

On the same VM I have dnsmasq giving IPs to my LAN/WLAN clients without any problem, but I just can't obtain an IP address for my L2TP VPN clients (I used both smartphone and macOS clients).

But if I shut down the dnsmasq on the VM "main" and run it on another VM/container, VPN clients get IPs without problems.

Any configuration or step that I must make to use/reach dnsmasq on the same VM as SE runs?

I also searched the forum but sincerely I didn't understand what they did in similar scenarios.

TIA

[solo]

Hi, use a double-bridge: HUB1 > SE soft tap > ens6p18
https://www.vpnusers.com/search.php?keywords=soft+tap