diff --git a/Vagrantfile b/Vagrantfile
index 2fe5502..ec65455 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -49,7 +49,7 @@ Vagrant.configure(2) do |config|
         lv.memory = 2*1024
       end
       config.vm.hostname = fqdn
-      config.vm.network :private_network, ip: ip_address, libvirt__forward_mode: 'none', libvirt__dhcp_enabled: false
+      config.vm.network :private_network, ip: ip_address, libvirt__forward_mode: 'open', libvirt__dhcp_enabled: false, bridge: 'enp0s31f6'
       config.vm.provision 'hosts' do |hosts|
         hosts.autoconfigure = true
         hosts.sync_hosts = true
@@ -82,7 +82,7 @@ Vagrant.configure(2) do |config|
         lv.memory = 2*1024
       end
       config.vm.hostname = fqdn
-      config.vm.network :private_network, ip: ip_address, libvirt__forward_mode: 'none', libvirt__dhcp_enabled: false
+      config.vm.network :private_network, ip: ip_address, libvirt__forward_mode: 'none', libvirt__dhcp_enabled: false, bridge: 'enp0s31f6'
       config.vm.provision 'hosts' do |hosts|
         hosts.autoconfigure = true
         hosts.sync_hosts = true
diff --git a/provision/rke2-server.sh b/provision/rke2-server.sh
index 9eb5439..ffa956f 100755
--- a/provision/rke2-server.sh
+++ b/provision/rke2-server.sh
@@ -176,11 +176,11 @@ kubectl get clusterrolebinding --all-namespaces -o json | jq .items[].subjects
 
 # rbac access matrix.
 # see https://github.com/corneliusweig/rakkess/blob/master/doc/USAGE.md
-kubectl krew install access-matrix
-kubectl access-matrix version --full
-kubectl access-matrix # at cluster scope.
-kubectl access-matrix --namespace default
-kubectl access-matrix --sa kubernetes-dashboard --namespace kubernetes-dashboard
+#kubectl krew install access-matrix
+#kubectl access-matrix version --full
+#kubectl access-matrix # at cluster scope.
+#kubectl access-matrix --namespace default
+#kubectl access-matrix --sa kubernetes-dashboard --namespace kubernetes-dashboard
 
 # list system secrets.
 kubectl -n kube-system get secret