Good evening,
I have set up a cluster in Proxmox and it works so far. My problem is that the network interfaces are not really working.
As in many other Proxmox installations, I have configured the network interfaces as Linux bridges.
Then I edited the /etc/network/interfaces file and it should actually work.
Unfortunately the Pfsense does not pull the WAN/LAN interface correctly, I just don't know why.
Here is the /etc/network/interfaces:
This is the current situation in the Pfsense:
I hope someone can help me further.
With this in mind, have a nice weekend
Kind regards
Thorshammer2110
I have set up a cluster in Proxmox and it works so far. My problem is that the network interfaces are not really working.
As in many other Proxmox installations, I have configured the network interfaces as Linux bridges.
Then I edited the /etc/network/interfaces file and it should actually work.
Unfortunately the Pfsense does not pull the WAN/LAN interface correctly, I just don't know why.
Here is the /etc/network/interfaces:
GNU nano 7.2 interfaces
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
iface lo inet6 loopback
auto enp0s31f6
iface enp0s31f6 inet static
address XXX.XXX.XXX.XXX/26
gateway XXX.XXX.XXX.XXX
up route add -net XXX.XXX.XXX.XXX netmask 255.255.255.192 gw XXX.XXX.XXX dev enp0s31f6
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A PREROUTING -i enp0s31f6 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 10.0.0.2
post-up iptables -t nat -A PREROUTING -i enp0s31f6 -p udp -j DNAT --to 10.0.0.2
iface enp0s31f6 inet6 static
address 1a23:449:2a:3aa::2/64
gateway fe80::1
post-up ip6tables -t nat -A PREROUTING -i enp0s31f6 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to fc00:2::2
post-up ip6tables -t nat -A PREROUTING -i enp0s31f6 -p udp -j DNAT --to fc00:2::2
iface eth0 inet manual
auto vmbr1
iface vmbr1 inet static
address 10.0.0.1/30
bridge-ports none
bridge-stp off
bridge-fd 0
post-up iptables -t nat -A POSTROUTING -s '10.0.0.0/30' -o enp0s31f6 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.0.0.0/30' -o enp0s31f6 -j MASQUERADE
#WAN
auto vmbr2
iface vmbr2 inet static
address 192.168.2.2/24
bridge-ports none
bridge-stp off
bridge-fd 0
#VM-LAN
# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
iface lo inet6 loopback
auto enp0s31f6
iface enp0s31f6 inet static
address XXX.XXX.XXX.XXX/26
gateway XXX.XXX.XXX.XXX
up route add -net XXX.XXX.XXX.XXX netmask 255.255.255.192 gw XXX.XXX.XXX dev enp0s31f6
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A PREROUTING -i enp0s31f6 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 10.0.0.2
post-up iptables -t nat -A PREROUTING -i enp0s31f6 -p udp -j DNAT --to 10.0.0.2
iface enp0s31f6 inet6 static
address 1a23:449:2a:3aa::2/64
gateway fe80::1
post-up ip6tables -t nat -A PREROUTING -i enp0s31f6 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to fc00:2::2
post-up ip6tables -t nat -A PREROUTING -i enp0s31f6 -p udp -j DNAT --to fc00:2::2
iface eth0 inet manual
auto vmbr1
iface vmbr1 inet static
address 10.0.0.1/30
bridge-ports none
bridge-stp off
bridge-fd 0
post-up iptables -t nat -A POSTROUTING -s '10.0.0.0/30' -o enp0s31f6 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.0.0.0/30' -o enp0s31f6 -j MASQUERADE
#WAN
auto vmbr2
iface vmbr2 inet static
address 192.168.2.2/24
bridge-ports none
bridge-stp off
bridge-fd 0
#VM-LAN
This is the current situation in the Pfsense:
I hope someone can help me further.
With this in mind, have a nice weekend
Kind regards
Thorshammer2110
Last edited: