PFsense VM on a single-NIC host not receiving WAN traffic

[Pandez]

I have a VM configure on proxmox to run pfsense from my network. Since the host only has one NIC, I am using a router-on-a-stick/ROAS configuration to handle the traffic with the use of VLAN tagging to differentiate WAN traffic from LAN. I use this video as a guide to install and configure both PFsense and a smart switch with the right VLAN tagging and got it set up more or less as the output looks towards the end of the video: I have one port on the switch set up to receive WAN traffic only, and another port set up as a trunking port that receives both tagged and untagged traffic.

The problem is that when I connect my modem to the switch, the WAN interface continues to display 0.0.0.0 and not getting and IP address I expect. So the VM is either not getting the traffic or doesn't know to handle it. Whatever it is, I think it might be something at the VM management interface level. Here's what the network interface looks like for my host:



And here is the VM pfsense is running on:

boot: order=virtio0;ide2;net0
cores: 2
cpu: host
ide2: local:iso/pfSense-CE-2.6.0-RELEASE-amd64.iso,media=cdrom,size=749476K
memory: 2048
meta: creation-qemu=7.1.0,ctime=1678634724
name: pfsense
net0: virtio=56:CF:87:42:F3:F2,bridge=vmbr0,firewall=1
numa: 0
ostype: other
scsihw: virtio-scsi-single
smbios1: uuid=2ee70090-85e8-4071-a411-37438c2f4e8d
sockets: 1
vga: qxl
virtio0: local-lvm:vm-103-disk-0,iothread=1,size=12G
vmgenid: 4a259935-9d80-4783-9320-7af02f5607ca

Unsure if something is set up incorrectly, but i'd appreciate any suggestions.

 

[Dunuin]

According to your configs the PVE host is set up to use untagged traffic for itself. You got a vlan-aware bridge and you didn't set a VLAN tag for the virtual NIC, so your pfsense VM should be able send and receive tagged packets from different VLANs. Did you set up VLANs in your pfsense VM, as the VM would need to manage those?

 

[Pandez]

According to your configs the PVE host is set up to use untagged traffic for itself. You got a vlan-aware bridge and you didn't set a VLAN tag for the virtual NIC, so your pfsense VM should be able send and receive tagged packets from different VLANs. Did you set up VLANs in your pfsense VM, as the VM would need to manage those?

I set up VLAN 10 in the pfsense VM for WAN traffic. I then went into my managed switch's interface and set up port 5 to receive traffic tagged by this VLAN. Port 1 receives both tagged and untagged (Re: Everything else from LAN) and connects to the NIC in the host. Aside from checking the vlan-aware box on the bridge, I didn't configure anything in the proxmox management GUI.