Help Setting up Pfsense on Xenserver

jwalhous

Hi,
I'm currently running a separate pfsense box from my xenserver and if possible would like to setup pfsense as a vm and eliminate the current physical pfsense box.

Currently xenserver is setup on IP 192.168.2.2
My Physical pfsense has 2 lan cards one range 192.168.10.0/24 and the other range 192.168.2.0/24

I also have server 2012 r2 on xenserver using IP 192.168.2.3

my xenserver has 4 physical lan ports.

So I'm rather confused as to how to set this up and would really appreciate some help

Regards
Jamie

aimdev

Hi

You need to determine which network interfaces (physical) are connected to which network, ie LAN and WAN.

When I installed the software it managed to determine this in the configuration phase, however I only have two interfaces.

You need to ensure once its installed, you then install the xen-tools, so you can modify the lan interface if you get it wrong.

The xentools version you can use is ver 6.2, I have started a thread enquiring if the ver 6.5 tools are going to be made available,
the 6.2 version work ok on ver 6.5 of the hypervisor though.

I installed the correct iso via the xencenter program, which runs only on windows.

I am assuming you are using the citrix xenserver.

Hope this helps

Aimee

jwalhous

Hi,
I've got it working but haven't installed xentools yet, I'm not sure I have it setup correctly.
I have to plug lan port 2 into lan port 1 which is the port xenserver is using
my xenserver is on ip 192.168.2.2
I have my mailserver running on exchange in a vm on IP 192.168.2.3

and I have lan port 1 in pfsense going to a switch which is the rest of my network which is on 192.168.10.0/24 range

It all seems to work ok but I kind of doubt that I have it setup correctly, I'm not much of an expert at this I'm afraid.

Regards
Jamie

aimdev

@jwalhous:

Hi,
I've got it working but haven't installed xentools yet, I'm not sure I have it setup correctly.
I have to plug lan port 2 into lan port 1 which is the port xenserver is using
my xenserver is on ip 192.168.2.2
I have my mailserver running on exchange in a vm on IP 192.168.2.3

and I have lan port 1 in pfsense going to a switch which is the rest of my network which is on 192.168.10.0/24 range

It all seems to work ok but I kind of doubt that I have it setup correctly, I'm not much of an expert at this I'm afraid.

Regards
Jamie

Hi

as a guide, as I re-configured pfsense on my citrix xenserver, the physical interfaces are as follows

xn0 - lan - 192.168.1.0/24 static address 192.168.1.1
xn1 - wan - 192.168.0.0/24 dhcp address from modem 192.168.0.x

You will need the wan to be working to download xentools , and install. Its not a package that you can just install
via the gui, you need to go into the console with the xencenter

the site blog.feld.me has instructions.

Can you confirm what version of xenserver you are using please.

Aimee

jwalhous

Thanks for your reply,
I managed to get xentools installed so thanks for that.

I however need to change a few things, if pfsense is off I can't access xenserver as it's IP is 192.168.2.2 and my computer trying to access it is 192.168.10.3.
It can't access it if pfsense is down.
If I give Xenserver a static IP in the 192.168.10.0/24 range I can then see it ok but then my Server 2012 running my exchange can't talk to the rest of the network as it's IP is 192.168.2.3

I could probably change everything to the 192.168.10.0/24 range I guess if that will work better.

Regards
Jamie