Proxmox with PFSense and other VMs

[fmoreira86]

Hi guys,

I want to build a new lab environment so basically what I want to do is:

Internet |> PFSense Firewall |> Internal Lan's (with Vlans)

PFSense will do all the routing and should be virtualized and my servers will be VMs too.

PFSense VM (will have at least 2 virtual NICS): 1 to the WAN and 1 to the LAN.

All of this in 1 Proxmox server with 2 NICs.

Is there any chance to use these two NICs with LACP trunking all my vlans to the physical proxmox server and then setting PFSense to:

- Have the Wan Virtual Nic set as "access" with no VLAN.
- Have the Lan virtual Nic set as "trunk" having my vlans configured there.

All other VMs would have statically assigned vlan IDs to their virtual nics.

Possible?

Thanks a lot!!

 

[Raymond Burns]

I run something similar right now.
I have pfSense managing all of my VLANS
Tagged on vmbr1
Then I have 3 internal vmbr networks without physical nics for DMZing.
Other than that, all 6 VLAN networks are run over the pfSense. Everything is tagged. Don't know what would happen with additional untagged traffic. Didn't test

 

[fmoreira86]

How many interfaces do you have in pfsense?


Sent from my iPad using Tapatalk

 

[Raymond Burns]

Vlan 2, 5, 6, 40, 60, 70

All run dhcp except for number 2, which is my vlan for public modem. Also, all have snort, havp, and squidguard filtering. Vlan 60 is my dmz for developers. Only traffic in and out. No access to other networks

 

[fmoreira86]

I mean virtual physical nics.

Thanks


Sent from my iPad using Tapatalk

 

[Raymond Burns]

3.
Bonded storage Nic for clustering and storage traffic, and single eth2 for standard LAN.
All vmbr bridges are tagged. I didn't set any tags in /etc/network/interfaces.
I just add tag when I add Nic to vm. Only add eth2 to vm's

 

[fmoreira86]

May I ask you for some print screens of your "networking" configs. Both from pfsense and proxmox itself.

Thanks a lot!


Sent from my iPad using Tapatalk

 

[Raymond Burns]

Proxmox setup is normal. Nothing special or tagged. Tags are added on bridge creation for vm. Pfsense is non the wiser. Standard nics from pfsense's perspective.

 

[fmoreira86]

I will try it


Sent from my iPad using Tapatalk