Setup pfSense firewall only for my VMs

[ZombieDemonCop]

I have a computer that I turned into a server. The motherboard's nic is only 100mbps so I added a pcie 1Gbps nic which I'm using as my primary and only nic. I want to setup pfSense as a firewall/router for all VMs that I'll setup on proxmox. I'm not going to be using pfSense for my home network. I just want to create an isolated network with proxmox. How can I achieve this ? The guides that I've come across are for setting up pfSense for their home network using 2 nics. I don't really want that.

In a nutshell, I don't want to disturb my existing home network and I want to create a virtual network for all my VMs and isolate them from my host network using pfSense firewall.

PS. I'm a beginner learning networking so I'm a bit new to proxmox and its networking capabilities.
Thanks.

 

[Hannes Laimer]

Hey,

you can pass through one of the NICs to the pfSense VM and configure it to be WAN. Then create a second Linux Bridge in PVE and attach it to all VMs including the pfSense one, then configure it to be the LAN side in pfSense and setup a DHCP server on the vmbr interface(if you want DHCP in you VM-only network). So the pfSense is the gateway for all VMs.

Note machines on your normal network won't be able to communicate with VM since pfSense sets up NAT by default IRC.

 

[ZombieDemonCop]

Hey,

you can pass through one of the NICs to the pfSense VM and configure it to be WAN. Then create a second Linux Bridge in PVE and attach it to all VMs including the pfSense one, then configure it to be the LAN side in pfSense and setup a DHCP server on the vmbr interface(if you want DHCP in you VM-only network). So the pfSense is the gateway for all VMs.

Note machines on your normal network won't be able to communicate with VM since pfSense sets up NAT by default IRC.

Thanks for your reply. Can I do this without passing through. My current processor doesn't support VTd , i have a new one otw. In order for my machines to access the vms, I would need to portfoward right ?

 

[Hannes Laimer]

Sure, you can use vmbr0 where also the PVE host is on.

 

[ZombieDemonCop]

Sure, you can use vmbr0 where also the PVE host is on.

Thank you

 

[louie1961]

why use pfSense, and not just use the firewall function built into Proxmox?

 

[ZombieDemonCop]

why use pfSense, and not just use the firewall function built into Proxmox?

I want to experiment with pfsense and it has a lot more features.