access to/from kvm/lxc via pfsense vm ipsec to/from another network

[yaboc]

i have proxmox set up in dc with public ip. few lxc containers running with private ip each one has private ip as well and i can ping locally between containers. i set up another kvm with pfsense with priv/pub ips and have site to site ipsec to another network.
my local proxmox network 10.10.10.0/24
pfsense 10.10.10.1/24 remote subnet 11.11.11.0/24
i can ping from pfsense the remote network and vice versa. i'd like to be able to ping from/to the rest of the local lxc containers/remote network. how would i go about this ?
thank you

 

[wolfgang]

Hi,

nic(WAN) -> vmbr0 -> pfsense WAM (vNIC) -> vmbr1 -> KVM/LXC

All KVM/LXC guest has an internal IP.
The public IP has to manage in the pfsense and forward with 1to1 Nat.

 

[yaboc]

thank you wolfgang this has worked.