[SOLVED] sharing ESXI host IP with pfsense
-
Assuming you have at least 2 NICs in your VMware box. Create a vSwitch called Public or Internet or WAN and associate it with your WAN NIC. Associate the VM Network vSwitch with your LAN NIC. For your pfSense VM, plug its WAN NIC into your WAN vSwitch and give the VM one of your public IP addresses.
https://doc.pfsense.org/index.php/PfSense_2_on_VMware_ESXi_5
-
"I like pfsense to share esxi host public IP to other VMs in it."
You only have 1 public IP, they your going to have an issue accessing your vmkern.. You would have to put the vmkern behind pfsense.. You can not set publicIPA on vmkern for esxi host and also put same publicIPA on pfsense wan interface..
-
He got 5 more.
-
Oh must of missed that, yeah if he has multiple public IPs then not an issue just connect the physical nic to the vswitch that has pfsense wan in it and the vmkern port group.
-
Oh must of missed that
Nonsense. I'm the only one who misses things around here.
-
Thank you so much, KOM and Johnpoz.
In conclusion, I need more than 1 Public IP … hehe ...
anyway, my new 5 IPs are alive now, so I am going to setup pfsense tmr (from the link KOM gave) as I do not keep buying public IPs for all the VMs inside my box.
-
yeah once you put the vms behind pfsense you can nat to them. Do you have any ipv6 addresses - its possible you could leverage ipv6 for vmkern and ipv4 for your pfsense wan, etc. If you have like console access to the esxi host you could also put the vmkern behind pfsense nat and only have to use 1 public IP for pfsense wan.
But that is way more difficult to setup, especially if you don't have any sort of out of band access to the esxi host.
-
yeah once you put the vms behind pfsense you can nat to them. Do you have any ipv6 addresses - its possible you could leverage ipv6 for vmkern and ipv4 for your pfsense wan, etc. If you have like console access to the esxi host you could also put the vmkern behind pfsense nat and only have to use 1 public IP for pfsense wan.
But that is way more difficult to setup, especially if you don't have any sort of out of band access to the esxi host.
Hi Johnpoz,
Thank you for your advise, I only have one IPv6 which is tied to main esxi host.
And unfortunately, I do not have console access for free. Have to pay a few dollars for KVM access to server, they will charge me hourly …. :'(
Anyway, next month, I am going to switch to a better plan which include free KVM access, then I will give it a try what you advise me. :)
-
who gives you 1 ipv6 address???
Why would they not just give you a full /64, and let you assign how every many you want/need?
This is on $15 a YEAR!! vps and get full /64 – I would find a new host if you ask me..
-
who gives you 1 ipv6 address???
Why would they not just give you a full /64, and let you assign how every many you want/need?
This is on $15 a YEAR!! vps and get full /64 – I would find a new host if you ask me..
hehe, sorry. I just checked again.
It is /64, not only single IPv6. :D -
Where there you go you have 18,446,744,073,709,551,616 ipv6 addresses to work with, which is a LOT different than 1 ;)
