> that route is added at the end of pve-routed > > route add -net 192.168.1.2 netmask 255.255.255.255 dev tapxxxx This is a route to the internal tap device! If you do not have an external route, the VM is not accessible from external sites?