Proxmox + pFsense Networking

meta

New Member
Mar 16, 2020
2
0
1
30
First of all, excuse the tardiness, there will be plenty.

I'm in the process of setting up my home-lab with the following items: ISP-modem --> Dell R20 II --> (running Proxmox (pFsense)) --> Cisco MS120-8LP switch --> Cisco M33 AP

Topology wise: shitty (unfinished) picture per illustration.

  • ISP modem | WAN 91.87.x.x | LAN 192.168.0.x | which lacks a bridge modus, yet contains MAC pass-through.
  • The R21O II running Proxmox | 2 nics | WAN 192.168.0.100 | LAN / |
  • pFsense | WAN 62.88.x.x | LAN 10.10.x.x |
  • MS12-8LP | 10.10.1.50
  • MR33 | 10.10.1.51
I recently tried giving pFsense a public IP. Which somehow worked by just whitelisting the R210 ii eth1 it's mac address in the ISP modem UI (MAC-PS) -- and selecting DHCP in pFsense for WAN. As thus everything behind pFSense is working flawlessly, or what I think at least.

Before however, I had both the Proxmox and pFsense config on the modem it's internal (192.168.x.x) network. The goal is to leave that network completely -- and migrate to pFsense -- Cisco switch and AP.

What troubles me at the moment is that once I'm connected to the AP behind the firewall (10.10.x.x) I ofc cant access the Proxmox installation (192.168.0.100) I'm sober enough to realize where this is going wrong, and therefore: I guess it;s only logical to migrate Proxmox from the current network, to the new segment. This is although where I'm lost.

Do I switch Proxmox to the new LAN segment (10.10.x.x) -- but then risk putting all the weight on the pFense VM (when that's down, so will be all)
Is giving Proxmox access to a public IP wise?
am I better of SSHing into it -- leave it be?

Any help would be helpfull, thank!
 
"I recently tried giving pFsense a public IP. Which somehow worked by just whitelisting the R210 ii eth1 it's mac address in the ISP modem UI (MAC-PS) -- and selecting DHCP in pFsense for WAN. As thus everything behind pFSense is working flawlessly, or what I think at least."

Regarding the working state of said matter, those words I retract. A
After an amount of time (varying between: 30 mins - 2 hours, the switch and ap aren't able to access the internet anymore.
I connected them for the time being back into the modem, and all is swell.