I'm trying to virtualize an opnsense router for my home network using Proxmox on a tiny PC with six NICs I want to be able to reach my PVE web UI from devices on my LAN.
The physical ethernet ports 0-5 correspond to enp2s0-enp7s0. Here's a snippet of my /hosts/network/interfaces file:
I have left the first port, enp2s0, out of any bridges so that I can do PCI-passthrough of that NIC to the opnsense VM and use it as the WAN interface (I have a PPPoE modem from my ISP). I used the sixth port, enp7s0 as the management interface when installing Proxmox and have assigned it 192.168.1.10.
The rest of the ports are in bridge vmbr1, which the opnsense VM sees as vtnet0 and which I have assigned as the LAN interface within opnsense (default gateway address of 192.168.1.1/24).
What's the best way to expose an IP address for the PVE web UI to clients - both virtual and real - that are behind the opnsense firewall VM?
The physical ethernet ports 0-5 correspond to enp2s0-enp7s0. Here's a snippet of my /hosts/network/interfaces file:
Code:
auto vmbr0
iface vmbr0 inet static
address 192.168.1.10/24
gateway 192.168.1.1
bridge-ports enp7s0
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 2-4094
#MGMT
auto vmbr1
iface vmbr1 inet manual
bridge-ports enp3s0 enp4s0 enp5s0 enp6s0
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 2-4094
#LAN
I have left the first port, enp2s0, out of any bridges so that I can do PCI-passthrough of that NIC to the opnsense VM and use it as the WAN interface (I have a PPPoE modem from my ISP). I used the sixth port, enp7s0 as the management interface when installing Proxmox and have assigned it 192.168.1.10.
The rest of the ports are in bridge vmbr1, which the opnsense VM sees as vtnet0 and which I have assigned as the LAN interface within opnsense (default gateway address of 192.168.1.1/24).
What's the best way to expose an IP address for the PVE web UI to clients - both virtual and real - that are behind the opnsense firewall VM?