Node to NAS-access between networks with pfSense

CharlesBing

New Member
Sep 13, 2021
2
0
1
52
Hello,

I have decided to bite the bullet and move our home network to Proxmox. I apologize if this question is a bit stupid, but I'm 76 and not so quick as I used to be.
I have a 6-port server, previously only used as firewall but now with Proxmox on it. I have added pfSense, and I was able to get it up and running. This is a trial setup. I know the setup is not secure and I have to harden it but I want to get the backup taken first.

Now, I want to backup the Proxmox node to our NAS, and this is where things are getting a bit strange for me.

The is config I used before I started "playing" is at the end of this post. I configured the IP's in pfSense> The WAN (vmbr1, iface enps1s0 needs VLAN10, connects over a PPoE connection and is not in scope}. The LAN-server segment is 10.14.6.0/24 with 10.10.6.1 as default gateway. I have created a dedicated Proxmox segment 10.10.7.0/24 with 10.14.7.1 as gateway. the Proxmox node is .249.

In pfSense and just for troubleshooting, I've created a top rule on the LAN segment that allows all communication to the Proxmox segment and on the Proxmox segment a rule that allows all communication to the LAN segment. I also created a rule on the Proxmox segment to allow access to the internet.

In the current config, I can:
- access the internet from the Proxmox-node and do the updates
- ping the gateway on the LAN 10.14.6.1
- access the proxmox node over SSH and HTTPS from the LAN and ping the proxmox host from the LAN

In the current config, I cannot:
- ping or access any other IP on the LAN, where my NAS is.

What should I do to connect the Proxmox node to the LAN please?


Bash:
auto lo
auto lo
iface lo inet loopback

iface enp6s0 inet manual
#Proxmox Management interface

iface enp1s0 inet manual
#WAN FW

iface enp2s0 inet manual
#LAN FW

iface enp3s0 inet manual

iface enp4s0 inet manual

iface enp5s0 inet manual

auto vmbr0
iface vmbr0 inet static
    address 10.10.7.249/24
    gateway 10.10.7.1
    bridge-ports enp6s0
    bridge-stp off
    bridge-fd 0

auto vmbr2
iface vmbr2 inet manual
    bridge-ports enp2s0
    bridge-stp off
    bridge-fd 0
#LAN bridge FW

auto vmbr1
iface vmbr1 inet manual
    bridge-ports enp1s0
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094
#WAN bridge FW

auto vlan10
iface vlan10 inet manual
    vlan-raw-device vmbr1
#Dedicated VLAN Proximus fiber

auto vlan10
iface vlan10 inet manual
    vlan-raw-device vmbr1
#Dedicated VLAN Proximus fiber
 

Attachments

  • LAN.jpg
    LAN.jpg
    97 KB · Views: 2
  • man.jpg
    man.jpg
    89.7 KB · Views: 2