DHCP from Pfsense to proxmox

[Carlos Andres Becerra]

Hi, please need your help.

Im have two NIC, one to my internet providier and other to my Switch.
Im have installing Pfsense as firewall, have one Issabel (IPBPX) and a Ubuntu Server (LAMP) and have my computers and all working fine, Pfsense assing the DHCP to all computers and servers and woring.

My problem is to connect with Proxmox. Im dont can see proxmox in my network (LAN), not found how can my PFSENSE assing a IP to proxmox.

My config is:
enp3s0 is the WAN (is connect to my modem and have a IP from my server provider)
enp2s0 is the LAN (is connect to my switch, dont have IP)
vrbm0 is a Linux bridge with emp3s0 (Is the WAN to PFsense)
vrbm1 is a Linux bridge with enp2s0 (is the LAN in PFSENSE, in Issabel and in my Ubuntu Server)


My question is: How can configure my proxmox to recived dhcp from vrbm1? Im like admin my proxmox from my LAN but is impossible in this moment.

Thanks for your help

 

[r.jochum]

Hi Carlos,

First exclude an IP (or a IP Range) in PFSense for static IP's,
then you to assign one of these IPs to vmbr1 and set it to pvelocalhost in /etc/hosts.

After a reboot you should be able to access proxmox over https://<your-assigned-ip>:8006/

Not sure if you need to change anything else, i don't think so.

 

[Carlos Andres Becerra]

Hi Carlos,

First exclude an IP (or a IP Range) in PFSense for static IP's,
then you to assign one of these IPs to vmbr1 and set it to pvelocalhost in /etc/hosts.

After a reboot you should be able to access proxmox over https://<your-assigned-ip>:8006/

Not sure if you need to change anything else, i don't think so.

Hi Sr, thanks for your reply, im try but is not possible, look my config files:

root@virtual:~# cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
190.148.150.116 virtual.casoft.com.co virtual pvelocalhost
192.168.150.90    virtual.casoft.com.co virtual pvelocalhost
# The following lines are desirable for IPv6 capable hosts

root@virtual:~# cat /etc/network/interfaces
auto lo
iface lo inet loopback

iface enp3s0 inet manual

auto enp2s0
iface enp2s0 inet manual
#This is my WAN Connection
auto vmbr0
iface vmbr0 inet static
    address  190.148.150.XXX
    netmask  255.255.255.0
    gateway  190.148.150.1
    bridge_ports enp3s0
    bridge_stp off
    bridge_fd 0
#iface vmbr0 inet dhcp

#This is my internal LAN
auto vmbr1
iface vmbr1 inet static
        address 192.168.150.90
        netmask 255.255.255.0
        gateway 192.168.150.1
    bridge_ports enp2s0
    bridge_stp off
    bridge_fd 0

 

[r.jochum]

Remove the line

192.168.150.116 virtual.casoft.com.co virtual pvelocalhost

in /etc/hosts, you can have only one IP for it was 192.168.150.116 your previous IP ?

If yes, why not use that IP - no problems with switching IPs in proxmox-ve then.

 

[Carlos Andres Becerra]

Sorry, im change
root@virtual:~# cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
190.148.150.116 virtual.casoft.com.co virtual pvelocalhost
192.168.150.90 virtual.casoft.com.co virtual pvelocalhost

 

[r.jochum]

still you can have only one "pvelocalhost" AND you shouldn't have the public and the local address pointing to its name.

 

[Carlos Andres Becerra]

Ok thanks understant, then im not can connect by my WAN and my LAN?
Mabe this is the problem, im try connect by this two interfaces.
NOw disable the access from the WAN and only put the LAN, and try


Thanks for your help

 

[synthetic64]

I am also trying to configure pfsense->proxmox dhcp.

Here is my interface at /etc/network/interfaces:

auto vmbr1
allow-hotplug vmbr1
iface vmbr1 inet dhcp

DHCP doesn't work:

root@hs:~# ifup vmbr1
Internet Systems Consortium DHCP Client 4.4.1
Copyright 2004-2018 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/

Listening on LPF/vmbr1/22:02:02:5d:bd:8b
Sending on   LPF/vmbr1/22:02:02:5d:bd:8b
Sending on   Socket/fallback
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 6
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 13
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 15
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 9
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 10
DHCPDISCOVER on vmbr1 to 255.255.255.255 port 67 interval 8
No DHCPOFFERS received.
No working leases in persistent database - sleeping.

virtual NIC config:


pfsense statistics:


not much packets passed through...
DHCP on OPT4 is enabled, ofcourse. Configurations are the same, but DHCP on LAN interface working fine.



What am I doing wrong?

 

[synthetic64]

Well, I made a bridge inside pfsense and made it LAN, now it is working. Maybe somehow pfsense dhcp refused to work with everything except LAN, even if it is enabled for that interface... Also replacing Vert IO NIC for Intel E1000 and changeing VM OS type to "Other" helped me. Here is my bridge settings:

auto vmbr0
allow-hotplug vmbr0
iface vmbr0 inet static
        address 192.168.1.2
        netmask 255.255.255.0
        gateway 192.168.1.1
        hwaddress ether XX:XX:XX:XX:XX:XX
        bridge-ports none
        bridge-stp off
        bridge-fd 0

Here is one useful tutorial. Also you can try to make bridge-switch in LAN's place (second line), like so:





Also disabling hardware checksum offloading instead of changing Vert IO to Intel E1000 might help you.