Cannot ping vmbr1 IP from VPN? All other traffic to same subnet routes fine

[bleomycin]

I have a basic setup where eth0/vmbr0 are the "WAN" connection in a pfsense install and vmbr1 is the "lan" interface all vm's share and use the pfsense vm to route to the internet. Everything works great except for 1 exception. The proxmox vmbr1 interface has an IP of 192.168.2.3, and every VM attached to the vmbr1 interface on the proxmox host can ping it just fine, however vpn traffic from my home (192.168.1.0/24) cannot ping the proxmox vmbr1 IP of 192.168.2.3, however I can ping every other VM in the 192.168.2.0/24 range just fine.

Something is breaking the route only to the proxmox vmbr1 IP but i'm not sure what? I'm not able to set a gateway for vmbr1 or a default route so i'm pretty lost now?

auto lo
iface lo inet loopback

iface eth0 inet manual

iface eth1 inet manual

auto vmbr0
iface vmbr0 inet static
        address  168.221.24.197
        netmask  255.255.255.240
        gateway  168.221.24.193
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0

auto vmbr1
iface vmbr1 inet static
        address  192.168.2.3
        netmask  255.255.255.0
        bridge_ports none
        bridge_stp off
        bridge_fd 0

Thanks for any help!

 

[manu]

I suppose your VPN end point is inside the pfSense VM.
From inside the pfSense VM, can you ping the 192.168.2.3 adress ?

 

[Claus Stjernoe]

2 options:
- On your Firewall create a NAT and mask all traffic from the VPN interface to the 192.168.2.x network to originate from 192.168.2.(ip of firewall)
- Make sure you have route on your Proxmox that routes 192.168.1.0/24 via the 192.168.2.(ip of firewall)

Regards,