PVE GUI Access from pfSense VM

[kwat]

Hi,

I am running PVE 8.3 on a mini PC that has 5 2.5GB NICs. The mini PC will only host pfsense CE (2.7.2) and a couple local services. I use PCI pass-through to a pfsense VM for 4 of the 5 NICs. Those NICs are my WAN, LAN, Wifi and IOT networks. The last NIC is in vmbr0 as I wanted access to the PVE GUI if pfsense went down. What I just released is the I cannot access PVE GUI from the LAN nor does PVE have internet access. Is there a way for me to:

1/ Connect to PVE GUI from LAN

2/ Give PVE internet access for software upgrades, etc

3/ Have PVE access if pfsense is down

 

[fba]

Hi,

out of curiosity, why do you use PCI pass-through?
Usual setup would be creating individual bridges with one interface assigned to each and assign these bridges to the pfsense VM.

The vmbr0 has an IP assigned, but PVE can't be accessed from same Broadcast domain?
The default gateway configured for PVE host is the pfsense VM, probably it's IP on LAN interface?
The nic which is for LAN at pfsense and the nic meant for the just-in-case PVE access are connected somehow to the same broadcast domain?
The pfsense VM is configured for the routing part is has? Suitable firewall rules are set?

Would you like to share the output of following shell commands on PVE host cat /etc/network/interfaces and ip a s and ip r s and qm config <pfsense_vm_id>?

 

[kwat]

I am a home-laber and was just using PCI pass-thru as a learning experience. I am going back to the creating individual bridges with one interface assigned to each and assign these bridges to the pfsense VM.