PFSENSE - Firewall - home using

[issa2020]

hello i think i found the official PFSENSE documentation to how using it with proxmox :

https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox-ve.html

and we have o create some bridge interface, not the pci card on pfsense

it's official use by Pfsense dev

 

[vesalius]

Typically significantly easier to just use Linux Bridges and not do pass through as pfsense suggested.

 

[issa2020]

Helloik everything works for me thanks all

 

[-Richard-]

I've exactly the same problem.

2 interfaces :
WAN -> vmbr0
LAN -> vmbr1

pfsense and Win11 VM.

Win11 VM receives a working configuration from DHCP server on vmbr1
A real PC client connected directly on enp45s0 doesn't receive a valid configuration, I have to enter IP, subnetmask, gateway manually.

That's a problem because I alsi have an orbi system which need to receive information from DHCP...

 

[apoc]

A real PC client connected directly on enp45s0 doesn't receive a valid configuration, I have to enter IP, subnetmask, gateway manually.

What directly do you mean by "directly connected"?
Are you using a switch? If not - maybe the interfaces are not early enough in "link up" state - that also means no dhcp request is received...

 

[-Richard-]

What directly do you mean by "directly connected"?
Are you using a switch? If not - maybe the interfaces are not early enough in "link up" state - that also means no dhcp request is received...

A PC connected via RJ45 on my asrock NUC 1220p on the pfsense's LAN interface.

No switch.

 

[apoc]

No switch.

Yeah. This is likely a "link up" Problem. Grab a switch, put it in between and check if this solves the issue.

 

[-Richard-]

Hello,

Tried, but it doesn't solve the problem...

Thanks

 

[apoc]

Sorry for the late reply. I hope you have already solved your issue.
Sometimes a NIC somewhat cripples UDP packets. I have seen this in the past on other Hypervisors.
What exact hardware are you using?

 

[-Richard-]

Hello apoc !

No, a few weeks later, but I still encounter this problem...

I have an ASRock 1220p with 2 x Intel 2.5 Gigabit

Internet working when ip, subnet and gateway manually entered. No internet via DHCP...

 

[apoc]

This seems to be a Problem related to the chipset i225lm. You are not alone.
Check this:
https://www.reddit.com/r/Proxmox/comments/o2l7h0/i225lm_nic_dhcp_server_in_vm_not_working_it_does/

 

[apoc]

According to this post a BIOS update might be helpful. Disabling offloading does not seem to help.

https://forum.netgate.com/topic/175592/can-not-get-dhcp-leases-on-new-intel-i225-lm-based-machine/13

What BIOS version are you running? Is there a newer available?

 

[-Richard-]

According to this post a BIOS update might be helpful. Disabling offloading does not seem to help.

https://forum.netgate.com/topic/175592/can-not-get-dhcp-leases-on-new-intel-i225-lm-based-machine/13

What BIOS version are you running? Is there a newer available?

Thanks !

I will try as soon as I have time :

- update bios
- replace linux bridge by OVS bridge
- disable AMT on i225... but what is AMT and how to disable this ?

 

[apoc]

I guess AMT is this:
https://www.intel.de/content/www/de...ive-management-technology/implementation.html

 

[-Richard-]

Updated bios, no improvement

I've also switched from Linux bridge to ovs bridge, same result.

What's strange is that I now receive an IPv6 from DHCP but no IPv4 so no access to other sites than google, outlook, .. and no access to other devices on network