Archived
Found live: a laptop on the same wifi network as pve-test couldn't reach it at all (no ARP entry, not stale) despite every wired device working fine and the mgmt firewall already allowing ICMP - the router's AP/client isolation was blocking wireless-to-wireless traffic. Router-side fix only; nothing on pve-test to change for this symptom.