Vlan Puzzle in Proxmox with pfsense

khisanthax

New Member
Apr 13, 2023
2
0
1
So I'm not completely sure where I'm going wrong since it looks like I have more than a few moving parts. As you can see below I had minimal success but I'm guessing I'm not doing something right within the network settings of proxmox and pfsense so that other devices can see the vlan made in pfsense. I listed everything I did in case someone can spot what's wrong or missing or at least very that the proxmox networking with pfsense would allow VMs on another hypervisor to get the vlan information. Thanks in advance.

Cisco Switch- I created Vlan 50, in interface settings I set all 16 ports to trunk, in membership I can see each has 1UP/50T, in port to vlan 1 all 16 ports are untagged, in vlan 50 all 16 ports are tagged.

Pfsense - went to interfaces, Vlan and created vlan 50 attached to vtnet3 which is unused, vtnet1 is lan and vtnet2 is wan. In interfaces I added vlan50interface, then enabled it, set ip4 static and set it [192.168.50.1](https://192.168.50.1), save and apply. Went to firewall, rules vlan50interface and added ip4&6 any to any. Save, apply. Went to dhcp server, vlan50interface, enable and set a range of 50.100 to 50.200.

Proxmox - Under proxmox, network I have a bridge vmbr0 for pfsense lan, vmbr1 for management, vmbr3 for pfsense wan and vmbr4 that's empty. In the pfsense vm I have those same 4 bridges. Now, for testing I created a vm in proxmox (ubunto) that bridges to vmbr4 and has a vlan tag 50. This is the only machine then when I turn on the network it receives a dhcp address from the vlan and can reach the internet.

The problem is I still can't get the VM's I have on vsphere to connect to the vlan.

vSphere - I created a port group vlan50pg that has a vlan tag with 50, promiscous, mac add change and forged transmits all set to accept. I go to my VM running ubunto, I have on network adapter for my default lan and the associated port group, I have another network adapter connected to port group vlan50pg. It does not connect to the vlan.



I've spent over 16 hours reading, watching youtube videos and I've learned a lot but obviously I'm missing something and I have no idea what. Thanks for anyone who reads this.


P.s. if pictures are better I'd be happy to post pictures of all of the above as well.
 
It sounds like your problem is your pfSense VLAN 50 is on an isolated network (vmbr4 == vtnet3 right?) that only has pfSense and your one Proxmox VM.

I would imagine you want your VLAN 50 to go out the LAN interface of the hypervisor, right? So you would have wanted to create your pfSense VLAN on vtnet1 instead of vtnet3.

I don't know Cisco terminology, so I can't comment on if the switch is configured correctly or not. But at the very least, I think you attached the VLAN to the wrong interface in pfSense.
 
  • Like
Reactions: Spoonman2002
"Cisco Switch- I created Vlan 50, in interface settings I set all 16 ports to trunk, in membership I can see each has 1UP/50T, in port to vlan 1 all 16 ports are untagged, in vlan 50 all 16 ports are tagged."

- why configure ALL 16 ports as Trunk??
- why set ALL 16 ports as tagged vlan50??

I think part of the connection problem is in the config of the Cisco switch.
A trunk port is commonly used for 'uplink'.
Setting a port as Tagged means it can have multiple vlans.
Setting a port as Untagged means it can have only one vlan (vlan50 in your case).
 
It sounds like your problem is your pfSense VLAN 50 is on an isolated network (vmbr4 == vtnet3 right?) that only has pfSense and your one Proxmox VM.

I would imagine you want your VLAN 50 to go out the LAN interface of the hypervisor, right? So you would have wanted to create your pfSense VLAN on vtnet1 instead of vtnet3.

I don't know Cisco terminology, so I can't comment on if the switch is configured correctly or not. But at the very least, I think you attached the VLAN to the wrong interface in pfSense.
I think the same....on pfsense you have to create the vlan on the lan interface.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!