private lan trouble

Rowan Sheridan

New Member
Mar 12, 2019
Grateful for some advice. I've Googled as much as I can to get a clear answer but can't see anything that will help me.

I'm trying to create a private network - with pfsense being the router.

My pve server is My internal network is using vmbr1 - with IP addresses of

From a machines in the private network - &
I can't ping or from internal network - Good
I can ping from internal network - Bad
I can't ping another 192.168... address from or - Good

The PfSense box is

Clearly I've configured something incorrectly but I'm just not sure what.

auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        bridge_ports eno1
        bridge_stp off
        bridge_fd 0

auto vmbr1
iface vmbr1 inet static
 bridge_ports none
 bridge_stp off
 bridge_fd 0

iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual



The question is which is the Pfsense's address in network? If it's it should work, check then the Pfsense settings.

If not it cannot work since the host routes each packet with destination in to the address mentioned above which has probably no connection to that subnet.
even though pfsense gets the ip from my lan router i cant access it from my lan - only on the ip
even though pfsense gets the ip from my lan router i cant access it from my lan - only on the ip

What means "my lan"?

Of course you have to set the routing also in the VMs properly, e.g.
route add -net default gw

And, finally, as already stated: connection to host's cannot work since it has defined as default gateway.
Sorry I'm not explaining myself clearly. When i refer to my LAN i mean
The is the internal network i wish to setup that has no external access. For malware analysis.
for anyone who is having similar issues.

my above settings do work

- on pfsense box - under interfaces WAN, untick the boxes which prevent private ips from accessing the WAN
- setup firewall rule on LAN to allow LAN to LAN for all protocols


The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!