PROX102 - Failed To Add Entry To Proxmox Ipset

Agent error code #PROX102 indicates that the agent tried to add an IP address to the configured Proxmox VE ipset and Proxmox rejected the operation.

The agent only adds and removes ipset entries. It does not create the ipset itself. If the ipset is missing the agent returns #PROX100 instead. Error #PROX102 means the set was found but the add was rejected.

Common causes include:

• The API token lacks the firewall privileges needed to modify the ipset (see also #PROX001)
• Proxmox rejected the entry value
• A transient error on the Proxmox host during the write

Steps to Resolve

Verify Token Privileges

1. Log into the Proxmox web UI
2. Navigate to Datacenter > Permissions
3. Confirm the token (or its user) has a role granting firewall modification on the relevant path (cluster firewall for cluster scope, or the VM for per-VM scope)

Confirm the Ipset Is Editable

1. Open the configured ipset in the Proxmox web UI
2. Confirm you can add an entry manually. If a manual add fails, resolve that first

Review the Agent Logs

The agent log records the Proxmox response that triggered this error. Review it to identify the specific cause.

For more details, see the Proxmox setup guide.

Still Having Issues?

We can help you out, contact us at [email protected].