Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense on esxi 6.7, can get it to work propperly.

    Scheduled Pinned Locked Moved Virtualization
    57 Posts 5 Posters 9.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      marcel1988
      last edited by

      So i need to edit this one:
      40714351-02a8-4df8-a44a-ef2c016611c7-image.png This is the nic port that is comming from the fiber optic.

      And can you tell me WHY i need to add VLAN 4095?

      1 Reply Last reply Reply Quote 0
      • T
        three
        last edited by three

        This is a specific of ESXI. If empty, VLAN are NOT supported. 4095 allows ALL VLAN numbers from the VM. I still get confused about VLAN, tagged, untagged, etc. But this should work,

        1 Reply Last reply Reply Quote 0
        • kiokomanK
          kiokoman LAYER 8
          last edited by

          indeed 4095 means that you set your vswitch as a trunk port letting any vlan pass through

          ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
          Please do not use chat/PM to ask for help
          we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
          Don't forget to Upvote with the 👍 button for any post you find to be helpful.

          1 Reply Last reply Reply Quote 0
          • M
            marcel1988
            last edited by

            Yes, this did the trick :)

            1 Reply Last reply Reply Quote 0
            • M
              marcel1988
              last edited by

              so after a few day's working perfectly.
              it now randomly stops working.

              In the PfSense VM i see this:
              c976ee3a-a7be-4787-8189-6d7008e1c6b1-image.png

              When i reboot the VM everything works again.
              What can this be?

              1 Reply Last reply Reply Quote 0
              • kiokomanK
                kiokoman LAYER 8
                last edited by kiokoman

                try to reinstall open-vm-tools
                maybe do a fsck also

                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                Please do not use chat/PM to ask for help
                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                1 Reply Last reply Reply Quote 0
                • M
                  marcel1988
                  last edited by marcel1988

                  @kiokoman

                  i have reinstalled the open-vm-tools and nothing changed
                  what you mean by fsck?

                  And what about the new update?
                  i'm now on:

                  2.4.4-RELEASE-p3 (amd64)
                  built on Wed May 15 18:53:44 EDT 2019
                  FreeBSD 11.2-RELEASE-p10

                  1 Reply Last reply Reply Quote 0
                  • kiokomanK
                    kiokoman LAYER 8
                    last edited by kiokoman

                    fsck: from console is option 5 and F key ( F: Reboot and run a filesystem check )
                    and yes, upgrade to 2.4.5

                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                    Please do not use chat/PM to ask for help
                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                    1 Reply Last reply Reply Quote 0
                    • M
                      marcel1988
                      last edited by

                      ok now i understand what you mean. i just did that a couple of hours ago and it seems to work again.
                      What about the update?

                      after the update i need to reinstall vm-tools again? and another fsck?

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK
                        kiokoman LAYER 8
                        last edited by

                        nope, no need, make a backup of your config just in case and do the upgrade

                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                        Please do not use chat/PM to ask for help
                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                        1 Reply Last reply Reply Quote 1
                        • M
                          marcel1988
                          last edited by marcel1988

                          Still this is not working fine. My internet disconnects every 4-5 hour.
                          So can you please check my settings and tell me if the are right:

                          First off all, the network settings:

                          1. ESXI WAN settings: + VLAN ID 4095
                            2a5c04f0-4638-4c0e-a37f-0610d4012047-image.png

                          2. ESXI LAN settings:
                            084a34a8-f224-4852-abba-0c44361b92f8-image.png

                          3. PfSense settings:
                            75daa62b-5e52-49d2-af2f-ec083f56d2b4-image.png

                          Cable managment:

                          WAN T-mobile > WAN Port intel NIC ESXI
                          LAN Port intel NIC > port 1 into standard network switch. ( not managed )
                          port 2 network switch > Onboard LAN port of ESXI server for managment.
                          The rest of the network ports of the switch are 2 Ubiquiti WIFI accespoint, and some computers.

                          As you can see, i also installed OpnSense just to find our of PfSense was the problem.
                          But also OpnSense has the same problems.

                          1 Reply Last reply Reply Quote 0
                          • kiokomanK
                            kiokoman LAYER 8
                            last edited by

                            it's ok, was the cable removed during this screenshot i suppose? physical adapters are not green
                            if you are using igbn (native esxi driver) try to install net-igb (intel driver for esxi)

                            Immagine.jpg

                            also install open-vm-tools from pfsense packages if you didn't already

                            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                            Please do not use chat/PM to ask for help
                            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                            1 Reply Last reply Reply Quote 0
                            • M
                              marcel1988
                              last edited by

                              Yes, the cable is removed otherwise i dont have good internet ofcourse :)

                              Both the drivers are installed:
                              c156b52c-3b20-45e0-8132-bed43bde2ec2-image.png

                              Also the package in PfSense for open-vm-tools is installed.

                              1 Reply Last reply Reply Quote 0
                              • kiokomanK
                                kiokoman LAYER 8
                                last edited by

                                idk, settings are ok, maybe do a backup of your configuration ad reinstall a new clean vm with pfsense 2.4.5 or try 2.5.0

                                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                Please do not use chat/PM to ask for help
                                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                1 Reply Last reply Reply Quote 0
                                • Cool_CoronaC
                                  Cool_Corona
                                  last edited by

                                  Can I get a Teamviewer into the box... then I will have your ESXi/pfsense running in 5 mins

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    marcel1988
                                    last edited by

                                    @kiokoman
                                    I have tried freshinstall of 2.4.5 and 2.5.0
                                    I have tried backing up and restoring.

                                    Maybe te problem is the fact i dont enter a MAC-ADDRESS into the wan port of the T-mobile fiber?
                                    and i leave the MTU also clear?

                                    @Cool_Corona
                                    if you can do it in 5 minutes. you can also tell me how ;)

                                    1 Reply Last reply Reply Quote 0
                                    • kiokomanK
                                      kiokoman LAYER 8
                                      last edited by

                                      that would be something specific to your isp 🤷

                                      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                      Please do not use chat/PM to ask for help
                                      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        marcel1988
                                        last edited by

                                        So i tried adding a MAC-ADDRESS but then there is no internet at all.
                                        Where in PfSense can i find a log? so maybe i can see where the problem is occurring.

                                        1 Reply Last reply Reply Quote 0
                                        • kiokomanK
                                          kiokoman LAYER 8
                                          last edited by kiokoman

                                          all logs are under status / system log
                                          what kind of connection is it? pppoe ? dhcp? static or dynamic ip?

                                          ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                          Please do not use chat/PM to ask for help
                                          we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                          Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                          1 Reply Last reply Reply Quote 0
                                          • G
                                            gcu_greyarea
                                            last edited by gcu_greyarea

                                            I have a cable modem and for testing purposes I have been switching between a pfSense VM and physical appliances.

                                            Not sure why - but my connection is stable with the mac address used when the connection was first setup. This may be a provider thing...

                                            Either way - if you want your pfSense VM to use a custom mac address on the WAN interface you'll need to allow forged transmits.

                                            I'd also suggest you enable promiscuous mode.

                                            https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-7DC6486F-5400-44DF-8A62-6273798A2F80.html

                                            and

                                            https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-92F3AB1F-B4C5-4F25-A010-8820D7250350.html

                                            and

                                            https://wahlnetwork.com/2013/04/29/how-the-vmware-forged-transmits-security-policy-works/

                                            For good measure also allow mac changes.

                                            Once its all working... you can revert these settings until you know exactly which setting breaks your environment.

                                            To sum this up: on the WAN vSwitch and Portgroup you need to:

                                            • Allow Mac Changes

                                            • Allow Forged Transmits

                                            • Allow Promiscuous Mode

                                            • In pfsense - on the WAN Interface use a Mac Address that has previously worked with your provider

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.