Access proxmox web interface from a vm

[evilmonkey1987]

Hello,

Is it possible to access the proxmox web interface from inside a vm? Here's my situation.

I am running proxmox on bare metal and have a pfsense vm set up. There are two physical nics on the proxmox box, one acts as lan and one as Wan inside pfsense. Pfsense works as the router and dhcp server, giving out 192.168.6.x IPs (it's successfully set up and connected to a hardware switch (unmanaged)). I want all Internet traffic to hit pfsense first, and all other machines, including proxmox, to be "behind" pfsense on the 192.168.6.x subnet.

I want to be able to access the proxmox web interface from a computer on the 192.168.6.x subnet. One suggestion I read was to get a third Nic and plug it into the switch, giving proxmox an ip in my subnet. I suppose I can do that, but I think there should be a way to avoid that with some kind of virtual bridge. I'm just not sure how. Suggestions appreciated. Thanks in advance.

 

[evilmonkey1987]

I figured this out. The way to do this is to give vmbr1 (which is bridged with eth0, which is LAN on the pfsense vm) an IP in the 192.168.6.x subnet. After I did that, I can access proxmox controls from behind pfsense. If you do this with a proxmox box connected directly to the internet, make sure to block access to the proxmox web interface from all subnets other than 192.168.6.x.

Edit /etc/default/pveproxy on the proxmox host:

ALLOW_FROM="192.168.6.0/24"
DENY_FROM="all"
POLICY="deny"

 

[Goddard]

how do you enable it?

Also I didn't have an existing pveproxy file. Do I just create it?