pfsense firewall questions

[bread-baker]

Hello,
we plan to test pfsense in proxmox. we have been using pfsense for 5 years on dedicated hardware.

my questions:

1- should pfsense be installed as a kvm or openvz?

2- we have an unused nic, eth2 , which we plan to use for WAN . only pfsense will use eth2 .
does it matter how eth2 gets configured on the proxmox host? I mean should it be done like this:

auto eth2
iface eth2 inet static
address 75.147.34.37
netmask 255.255.255.248
network 75.147.34.32
gateway 75.147.34.38

or as a vmbr?

thanks
Rob

 

[dswartz]

1. It has to be a KVM. Pfsense is based on freebsd - only linux guests can be openvz.

2. Create the second vmbr in the host node, but leave it uninitialized, and just bridge the pfsense interface to it. This is exactly what I have done.

 

[bread-baker]

re : "2. Create the second vmbr in the host node, but leave it uninitialized"

by 'uninitialized' what do you mean? just do not assign an i/p address at 'Configure bridge'
this is what I have done:

auto vmbr3
iface vmbr3 inet manual
        bridge_ports eth3
        bridge_stp off
        bridge_fd 0