Set the boot order in PVE. You can also group HA targets to shift as a group. I have a physical nic on WAN and LAN, and the LAN nic is VLANned for DMZ, guest, IOT, etc. As long as you keep them consistent from node to node, I’ve never had an issue.