Proxmox and ping between networks

charlesbing

Hello,

I have decided to bite the bullet and move our home network to Proxmox to save on electricity. I apologize if this question is a bit stupid, but I'm 76 and not so quick as I used to be. I have a 6-port server, previously only used as firewall but now with Proxmox on it. I have added pfSense, and I was able to get it up and running using the Virtualizing with Proxmox VE Configuration Recipe.

Now, I want to backup the Proxmox node to our NAS, and this is where things are getting a bit strange for me. This is a trial setup. I know the setup is not secure and I have to harden it but I want to solve the backup problem first.

The config I used before I started "troubleshooting" is at the end of this post. I configured the IP's in pfSense> The WAN (vmbr1, iface enps1s0 needs VLAN10, connects over a PPoE connection and is not in scope}. The LAN-server segment is 10.14.6.0/24 with 10.10.6.1 as default gateway. I have created a dedicated Proxmox segment 10.10.7.0/24 with 10.14.7.1 as gateway. the Proxmox node is .249.

In pfSense and just for troubleshooting, I've created a top rule on the LAN segment that allows all communication to the Proxmox segment and on the Proxmox segment a rule that allows all communication to the LAN segment. I also created a rule on the Proxmox segment to allow access to the internet.

In the current config, I can:

access the internet from the Proxmox-node and do the updates
ping the gateway on the LAN 10.14.6.1
access the proxmox node over SSH and HTTPS from the LAN and ping the proxmox host from the LAN

In the current config, I cannot:

ping or access any other IP on the LAN, where my NAS is.

The servers on the LAN network can ping each other, so it is not a problem with a host based firewall.

I have checked and double checked "Block private networks and loopback addresses" and "Block bogon networks" are disabled on both interfaces.

What should I do to enable communication between the Proxmox node and the servers on the LAN please? The servers on the LAN network can ping each other.

Thanks.

auto lo
auto lo
iface lo inet loopback

iface enp6s0 inet manual
#Proxmox Management interface

iface enp1s0 inet manual
#WAN FW

iface enp2s0 inet manual
#LAN FW

iface enp3s0 inet manual

iface enp4s0 inet manual

iface enp5s0 inet manual

auto vmbr0
iface vmbr0 inet static
    address 10.10.7.249/24
    gateway 10.10.7.1
    bridge-ports enp6s0
    bridge-stp off
    bridge-fd 0

auto vmbr2
iface vmbr2 inet manual
    bridge-ports enp2s0
    bridge-stp off
    bridge-fd 0
#LAN bridge FW

auto vmbr1
iface vmbr1 inet manual
    bridge-ports enp1s0
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 2-4094
#WAN bridge FW

auto vlan10
iface vlan10 inet manual
    vlan-raw-device vmbr1
#Dedicated VLAN Proximus fiber

auto vlan10
iface vlan10 inet manual
    vlan-raw-device vmbr1