[PVE-User] ARP issue

[ic]

Hi,

I’m running PVE 7.0 on a bunch of servers. I noticed something strange.
There is a vmbr2 containing one physical interface (ens19) with an IP (10.X.Y.Z/24).
There is a vmbr1 containing NO physical interface with another IP (10.A.B.C/24) (outside of the range of vmbr2, even if this is irrelevant for this problem).

Somehow, the other physical servers connected to ens19 get an ARP reply with the mac address of ens19 for the IP on vmbr1 (which, again, has no physical interface).

In an “ip a” output, this mac address appears only in ens19 and vmbr2. vmbr1 has its own mac (different from the physical mac of ens19/vmbr2).

What am I missing?

In my setup I need vmbr2 to have the same IP on each physical host and not leak on the outside network so this is pretty annoying :(

BR, ic