Have You tried Proxmox 1.9 beta? I'm also waiting for virtio drivers support.

Hi and thanks for info & discussion! In fact, this configuration (2 interconnected ESXi hosts + 2 FreeBSDs with CARP) works even without VDS (ESXi 4.1). But there is one problem: packets sent to "internal" CARPed IP or other IPs on "internal" (VM's) interfaces of FreeBSD's are transmitted to both machines. I.e. we converted our switch into hub. It's problem if network bandwidth matters (I don't know about performance impact of this behavior in case of transmitting internally in one ESXi, but we use ESXi-ESXi HW network to send this packets). For external network it's not big problem as external HW switch are still works as switch.

Try enabling Spoofing of MAC addresses on the network adapter setting of the pfSense VM in Hyper-V. Whenever I have problems with ARP this seems to sort it out. I've also had this problem with Untangle so I guess that it's not a BSD problem.

Well I had solved this. The first step is to create multiple-bridge script in /etc/xen/scripts /etc/xen/scripts/network-bridge netdev=eth0 bridge=xenbr0 start /etc/xen/scripts/network-bridge netdev=eth1 bridge=xenbr1 start now we need to edit xend-config.sxp change (network-script network-bridge) to (network-script multiple-bridge) After xend restart or reboot I get bridge name    bridge id              STP enabled    interfaces xenbr0          8000.0015c5f54501      no              eth0                                                         tap1.0                                                         tap2.0                                                         vif1.0                                                         vif2.0 xenbr1          8000.0015c5f54502      no              eth1                                                         tap1.1                                                         vif1.1

@tritron: Esxi performance cost money. I would say that 0 dollars xenserver will be much faster. Are we talking about money or performance? I've tested both with redhat support and vmware support. Both had same performance. Vmware has good points and xen others. Vmware is much more compatible then xen with those specific clients kernel versions requirements. Btw. I do not like flames Congratulations on you xen virtual server.

Does pfsense like one better than another? I'm using IDE right now. The choices are IDE, SATA. SAS and SCSI.

i think problem is virtual network settings. You can find in pic1 my own vmware virtual network settings. I use vmnet0 for internet access and it is bridged with my host Ethernet. You should make vmnet0 bridge mode with your windows Ethernet card then you will ping to internet. If you send your virtual network image we i can help you. Kind regards, SGTR [image: Vm_Network.png] [image: Vm_Network.png_thumb]

What needs to be done to install the openvm tool package for pfsense? (thinking of moving to pfsense under esxi 5.0 and getting my ducks in a row.  :) Greg Oh, never mind… 'system, packages, available packages, openvm tools'

I managed to set up okay on vmware worksation using a spare netgear router connected too the wan port and set up my existing router as an access point connected to the LAN port. Should I keep the firewall on the wan netgear on or will it be safe to turn it into a dumb modem? ie expose the wan port of the workstation pfsense is running on directly to the internet. I only have the vmware service enabled on that nic, all other services like tcp/ip sharing are disabled? Also how would someone easily bypass the firewall from the workstation without re-enabling the services on the nic?

@biggsy: Now there's a good point!  Why didn't I think of that?  I must have been distracted by all those beautiful girls who (amazingly) live in my area and, according to the ads, would just love to date me  :) You must live near me :) Amazing - I never knew there were so many single cute girls in the area :) Sorry, definitely use an E1000 adapter. Biggsy I just ran up a new pfSense VM and it works perfectly, so I guess something went hinky on the other install  :-\ Wouldn't even detect VMXNET2 Enhanced so had to go with E1000 and started working just fine. Thanks to everyone who took the time to help, now to try and plumb in the Untangle box for reporting purposes :) Kindest regards bb

@cmb: Either a quirk of the driver, or of VMware's USB redirection, or a combination of the two. That doesn't sound like a very good means of operation, I'd much rather use the NIC on the host, make sure it has no protocols checked other than the VMware bridge (so it can't have a v4 or v6 IP on that NIC, and doesn't offer any other services on it, to protect the host), and bridge it to the VM. Yea, I was thinking the VMWare redirect, since I've used the USB NIC on a laptop with PFSense fine. But wanted to see if anyone had the same issue and had worked around it. The reason I like the USB connected to the guest is the isolation it provides. I have it set to bridged, now, though. Thanks, Ben

You mean beyond the documentation I've already linked you to, which includes tutorials of various types? There's nothing magical about virtualisation. Plan and design it exactly as you would for a physical network. You just need to take the time to learn how VMWare or VirtualBox work and how to configure networking in them first. Then build your virtual network.

Overall, HV3 is very intriguing.  With PFsense I was able to get the VM to replicate between hosts, but it wouldn't auto-start on the receiving end…  Probably due to no integration services. I believe the beta Win8server bits will be out in a couple of weeks, so you may want to hold off a bit.

http://files.pfsense.org/jimp/ipv6/ running the lastest on alix and ipv6 very stable :)

:) agreed.. i just want to be sure that i havent got it setup wrong and have future problems

You can use pfSense on WMware Workstation with VLAN Tagging. You need to: 1. Make sure your physical NIC do not strip VLAN Tags. 2. Due to a WMware Workstation (and Player) bug, not more than 1500 bytes will be passed as MTU to your VM. Since your Tags will add at least (if you do not use QinQ) 4 bytes, you should also tune (i.e. lower it) MTU parameter in your VM.