Pfsense as a VM?

[Joseph Chrzempiec]

Hello i was looking into setting up pfsense into a VM but i have a few things i don't understand. First thing is I'm not a programmer at all just learning day by day so please base with me as I'm trying to figure this out.

Second things is i do know how to set it up on a System by it's self and the basic of installing it. But i do not know how in a proxmox VM. What i mean is once i install it giving it's Static ip address information. How do i tell the other VM to only use this Pf sense vm and not to my other local network? That is what I'm stuck on and do not understand.

Can someone please help me to understand this and point me in the right direction?


Joseph

 

[Stefan_R]

What you want to do is create a new linux bridge on the PVE host (on the GUI select your node, then go to "System">"Network"). Think of this as a virtual switch of sorts, it connects VMs (or containers) on layer 2 of the OSI stack.

The idea is to create a new bridge (say, vmbr1) and don't assign a "bridge-port" via the GUI (you also don't need to assign an IP, if you don't want your VMs accessing PVE). This will make it so the bridge does not connect to the outside, but only whatever VMs you assign. Then, connect your pfSense to the original bridge (vmbr0, what you probably have right now - that's the one allowing network/maybe internet access and also to log in to the PVE web interface) AND your new one, vmbr1. vmbr0 will be "WAN" in pfSense, vmbr1 is "LAN".

Now edit your VMs and select your new vmbr1 as the bridge for their network interfaces ("Hardware" tab in the GUI).

This will create the following topology, and is what I'd personally do for this scenario:

outside network <==> enpXnY <==> vmbr0 <==> pfSense VM <==> vmbr1 <==> VM1
                                 PVE                              <==> VM2 ...