I currently have pfsense running virtualised in proxmox. The computer running proxmox has two physcial nics. One nic (A) i use for proxmox manaement. The other nic (B) provides the WAN and the LAN. The WAN is on a vlan (the LAN is not).
What I would like to do is move the proxmox management nic (A) to a vlan under nic (B). However, I cannot seem to do this. For example, I have tried creating a new vlan/vmbr under nic B and moving the proxmox ip onto that vlan/vmbr (leaving the gateway the same) and enabling vlan awareness in vmbr definition etc. When that didn't work I tried doing much the same but via vlan's managed by pfsense itself. No matter what I try though it won't work. All that happens is that I lose networking entirely.
I would be grateful if someone could explain to me what I am misunderstanding. For example, perhaps there is some reason why I need separate physical nics for proxmox and pfsense networking. I didn't think so (as vlan's seemed to be able to do the job in conjunction with a correctly set up layer 3 switch) but perhaps I am wrong. If it is not possible for some reason I would be really interested to understand the reason. I am not a network specialist, just a normal IT savvy person.
I fully appreciate I can do this through multiple physical nics - i do this at the moment. However, I don't want to continue using multiple nics on the computer itself. My preference is to use a computer with one nic and vlans and let a layer 3 switch divvy out the vlans. So grateful if the advice could focus on the problem above, rather than suggesting I use multiple physical ports on the computer. As I say above, if there is some requirement for that to be the case though, I would be very grateful if someone could point me to the underlying reason for this (perhaps it's to with vlan and mac addresses or something).
Ultimately, if it is possible to do this all via just one physical nic on the computer hosting proxmox and pfsense then I'd be grateful for confirmation of the fact. I could then spend more time myself trying to sort it out. I have just spent so many hours failing, I am now wondering if there is something fundamental I've missed.
Many thanks
Jeremy
What I would like to do is move the proxmox management nic (A) to a vlan under nic (B). However, I cannot seem to do this. For example, I have tried creating a new vlan/vmbr under nic B and moving the proxmox ip onto that vlan/vmbr (leaving the gateway the same) and enabling vlan awareness in vmbr definition etc. When that didn't work I tried doing much the same but via vlan's managed by pfsense itself. No matter what I try though it won't work. All that happens is that I lose networking entirely.
I would be grateful if someone could explain to me what I am misunderstanding. For example, perhaps there is some reason why I need separate physical nics for proxmox and pfsense networking. I didn't think so (as vlan's seemed to be able to do the job in conjunction with a correctly set up layer 3 switch) but perhaps I am wrong. If it is not possible for some reason I would be really interested to understand the reason. I am not a network specialist, just a normal IT savvy person.
I fully appreciate I can do this through multiple physical nics - i do this at the moment. However, I don't want to continue using multiple nics on the computer itself. My preference is to use a computer with one nic and vlans and let a layer 3 switch divvy out the vlans. So grateful if the advice could focus on the problem above, rather than suggesting I use multiple physical ports on the computer. As I say above, if there is some requirement for that to be the case though, I would be very grateful if someone could point me to the underlying reason for this (perhaps it's to with vlan and mac addresses or something).
Ultimately, if it is possible to do this all via just one physical nic on the computer hosting proxmox and pfsense then I'd be grateful for confirmation of the fact. I could then spend more time myself trying to sort it out. I have just spent so many hours failing, I am now wondering if there is something fundamental I've missed.
Many thanks
Jeremy
Last edited:
