Load balancing with upstream pfsense devices
-
I'm attempting to get my lab configured, and don't want the standard LAN to share the same broadcast domain as the Lab.
So I've set up a IP Alias on the physical PFSense device, and tied it to a virtual switch. In turn the virtual pfsense instance is using this IP Alias as the upstream gateway.
Issue is I can't get pfsense to route to machines in the LAN on the upstream physical PFSense machine. If I port forward to a single machine in the lab everything is great. When I port forward to the virtual server, captures show no coms back from the virtual pfsense machine to the client.
I've tried multiple combinations of forwarding rules and outbound NAT configurations to no avail.
What am I missing?
Diagram:
+----------------------+ +-------------------------------------+ | Comcast SMC | | Physical PFSense x4 Ports | | LAN - 10.200.64.1/30 | | Gateway - 10.200.64.1/30 | +-----------------------+ | +---------+ WAN - 10.200.64.2/30 | | | +----------------------+ | LAN | 10.201.64.1/24+-----------------------+ Machine | | | | | LAN - 10.201.64.2/24 | | +--+ IP Alias - 10.204.64.1/30 | | | | + | +-----------------------+ | | | | | +-------------------------------------+ | | | | | | | | +------------------+ | | | | | +--------+----------+ +----------+------------------+ | | | | | | | Virtual Switch 1 | | Scenario 1 | | | | | On Virtual PFSense | | +--------+----------+ | Port forward 10.204.64.2 | | | | to 10.101.64.85 on 443 | | | | Status: working as expected | | +--------------+------------+ | | | | Virtual PFSense | +----------+------------------+ | | Gateway - 10.204.64.1/30 | | | | WAN - 10.104.64.2/30 | | | | LAN - 10.101.64.64/26 | | | | | | | +--------------+------------+ | | | | | | | | | | | | | | | | | | | | | | | +------------------+ +---------+--------+ +------------+-----+ | | | | | | | | | IIS Server 1 +--------+ Virtual Switch 2 +-------+ IIS Server 2 | | | 10.101.64.84/26 | | | | 10.101.64.85/26 | | | | +---------+--------+ | | | +--------+---------+ | +--------+---------+ | | | | | | | | | | +--------+---------+ | | +------+------+ | | +-------+-----+ | | | | Virtual Server | | | | | pool member +------------+ 10.101.64.83/26 +-------+ pool member | | | | | | | | | +-------------+ +---------+--------+ +-------------+ | | | +--------------+--------------------+ | | | | | Scenario 2 | | | On Virtual PFSense | | | Create Load Balancer Pool | | | Virtual Server on 10.101.64.83/26 | | | Both IIS Servers In Pool | | | Port forward 10.204.64.2 +-------------------------------+ | to 10.101.64.83 on 443 | | Status: Not Working as expected | | | +-----------------------------------+
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.