=== local_identity ===
router-ops
2026-07-11T10:09:38Z
lo               UNKNOWN        127.0.0.1/8 ::1/128 
eth0             UP             192.168.30.84/24 metric 100 fe80::be24:11ff:feef:ba33/64 
router-ops-mgts  UNKNOWN        10.250.100.4/32 
default via 192.168.30.1 dev eth0 proto dhcp src 192.168.30.84 metric 100 
10.71.100.0/24 dev router-ops-mgts scope link 
10.200.0.0/24 dev router-ops-mgts scope link 
10.201.0.0/24 dev router-ops-mgts scope link 
10.250.100.0/24 dev router-ops-mgts scope link 
192.168.30.0/24 dev eth0 proto kernel scope link src 192.168.30.84 metric 100 
192.168.30.1 dev eth0 proto dhcp scope link src 192.168.30.84 metric 100 

=== access_map_relevant ===
MGTS VM101 edge
---------------

VMID:
  101

Hostname:
  VM101-OpenWRT-edge

Role:
  OpenWRT edge / WAN / VPN egress for pve-wg-paid

SSH from Proxmox:

  ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2

Addresses:
  WAN eth0: DHCP behind vmbr0
  mgmt eth2: 10.71.100.2/24
  vpn_in eth1: 10.200.0.2/24
  direct_in eth3: 10.201.0.2/24

Route back to admin WG:
  10.250.100.0/24 via 10.71.100.1 dev eth2

Snapshots:

MAIN ACCESS PATH TO PVE-WG-PAID
============================================================

router-ops
  WG router-ops-mgts 10.250.100.4/32
    -> VM100 wg_remote 10.250.100.1/24
      -> Proxmox pve-wg-paid 10.71.100.222

Command from router-ops:

  ssh pve-mgts

Expected SSH path:

  source: 10.250.100.4
  target: 10.71.100.222

============================================================
MACHINES

=== pve_access_test ===
PVE_SSH_OK
pve-wg-paid
2026-07-11T10:09:37Z

=== pve_to_vm101_access_test ===
VM101_SSH_OK
2026-07-11T10:09:39Z
ash: hostname: not found

=== vm101_readonly_audit ===

vm101_audit_rc=0