Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense on esxi 6.7, can get it to work propperly.

    Scheduled Pinned Locked Moved Virtualization
    57 Posts 5 Posters 9.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      three
      last edited by three

      This is a specific of ESXI. If empty, VLAN are NOT supported. 4095 allows ALL VLAN numbers from the VM. I still get confused about VLAN, tagged, untagged, etc. But this should work,

      1 Reply Last reply Reply Quote 0
      • kiokomanK
        kiokoman LAYER 8
        last edited by

        indeed 4095 means that you set your vswitch as a trunk port letting any vlan pass through

        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
        Please do not use chat/PM to ask for help
        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

        1 Reply Last reply Reply Quote 0
        • M
          marcel1988
          last edited by

          Yes, this did the trick :)

          1 Reply Last reply Reply Quote 0
          • M
            marcel1988
            last edited by

            so after a few day's working perfectly.
            it now randomly stops working.

            In the PfSense VM i see this:
            c976ee3a-a7be-4787-8189-6d7008e1c6b1-image.png

            When i reboot the VM everything works again.
            What can this be?

            1 Reply Last reply Reply Quote 0
            • kiokomanK
              kiokoman LAYER 8
              last edited by kiokoman

              try to reinstall open-vm-tools
              maybe do a fsck also

              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
              Please do not use chat/PM to ask for help
              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

              1 Reply Last reply Reply Quote 0
              • M
                marcel1988
                last edited by marcel1988

                @kiokoman

                i have reinstalled the open-vm-tools and nothing changed
                what you mean by fsck?

                And what about the new update?
                i'm now on:

                2.4.4-RELEASE-p3 (amd64)
                built on Wed May 15 18:53:44 EDT 2019
                FreeBSD 11.2-RELEASE-p10

                1 Reply Last reply Reply Quote 0
                • kiokomanK
                  kiokoman LAYER 8
                  last edited by kiokoman

                  fsck: from console is option 5 and F key ( F: Reboot and run a filesystem check )
                  and yes, upgrade to 2.4.5

                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                  Please do not use chat/PM to ask for help
                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                  1 Reply Last reply Reply Quote 0
                  • M
                    marcel1988
                    last edited by

                    ok now i understand what you mean. i just did that a couple of hours ago and it seems to work again.
                    What about the update?

                    after the update i need to reinstall vm-tools again? and another fsck?

                    1 Reply Last reply Reply Quote 0
                    • kiokomanK
                      kiokoman LAYER 8
                      last edited by

                      nope, no need, make a backup of your config just in case and do the upgrade

                      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                      Please do not use chat/PM to ask for help
                      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                      1 Reply Last reply Reply Quote 1
                      • M
                        marcel1988
                        last edited by marcel1988

                        Still this is not working fine. My internet disconnects every 4-5 hour.
                        So can you please check my settings and tell me if the are right:

                        First off all, the network settings:

                        1. ESXI WAN settings: + VLAN ID 4095
                          2a5c04f0-4638-4c0e-a37f-0610d4012047-image.png

                        2. ESXI LAN settings:
                          084a34a8-f224-4852-abba-0c44361b92f8-image.png

                        3. PfSense settings:
                          75daa62b-5e52-49d2-af2f-ec083f56d2b4-image.png

                        Cable managment:

                        WAN T-mobile > WAN Port intel NIC ESXI
                        LAN Port intel NIC > port 1 into standard network switch. ( not managed )
                        port 2 network switch > Onboard LAN port of ESXI server for managment.
                        The rest of the network ports of the switch are 2 Ubiquiti WIFI accespoint, and some computers.

                        As you can see, i also installed OpnSense just to find our of PfSense was the problem.
                        But also OpnSense has the same problems.

                        1 Reply Last reply Reply Quote 0
                        • kiokomanK
                          kiokoman LAYER 8
                          last edited by

                          it's ok, was the cable removed during this screenshot i suppose? physical adapters are not green
                          if you are using igbn (native esxi driver) try to install net-igb (intel driver for esxi)

                          Immagine.jpg

                          also install open-vm-tools from pfsense packages if you didn't already

                          ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                          Please do not use chat/PM to ask for help
                          we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                          Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                          1 Reply Last reply Reply Quote 0
                          • M
                            marcel1988
                            last edited by

                            Yes, the cable is removed otherwise i dont have good internet ofcourse :)

                            Both the drivers are installed:
                            c156b52c-3b20-45e0-8132-bed43bde2ec2-image.png

                            Also the package in PfSense for open-vm-tools is installed.

                            1 Reply Last reply Reply Quote 0
                            • kiokomanK
                              kiokoman LAYER 8
                              last edited by

                              idk, settings are ok, maybe do a backup of your configuration ad reinstall a new clean vm with pfsense 2.4.5 or try 2.5.0

                              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                              Please do not use chat/PM to ask for help
                              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                              1 Reply Last reply Reply Quote 0
                              • Cool_CoronaC
                                Cool_Corona
                                last edited by

                                Can I get a Teamviewer into the box... then I will have your ESXi/pfsense running in 5 mins

                                1 Reply Last reply Reply Quote 0
                                • M
                                  marcel1988
                                  last edited by

                                  @kiokoman
                                  I have tried freshinstall of 2.4.5 and 2.5.0
                                  I have tried backing up and restoring.

                                  Maybe te problem is the fact i dont enter a MAC-ADDRESS into the wan port of the T-mobile fiber?
                                  and i leave the MTU also clear?

                                  @Cool_Corona
                                  if you can do it in 5 minutes. you can also tell me how ;)

                                  1 Reply Last reply Reply Quote 0
                                  • kiokomanK
                                    kiokoman LAYER 8
                                    last edited by

                                    that would be something specific to your isp 🤷

                                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                    Please do not use chat/PM to ask for help
                                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      marcel1988
                                      last edited by

                                      So i tried adding a MAC-ADDRESS but then there is no internet at all.
                                      Where in PfSense can i find a log? so maybe i can see where the problem is occurring.

                                      1 Reply Last reply Reply Quote 0
                                      • kiokomanK
                                        kiokoman LAYER 8
                                        last edited by kiokoman

                                        all logs are under status / system log
                                        what kind of connection is it? pppoe ? dhcp? static or dynamic ip?

                                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                        Please do not use chat/PM to ask for help
                                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                        1 Reply Last reply Reply Quote 0
                                        • G
                                          gcu_greyarea
                                          last edited by gcu_greyarea

                                          I have a cable modem and for testing purposes I have been switching between a pfSense VM and physical appliances.

                                          Not sure why - but my connection is stable with the mac address used when the connection was first setup. This may be a provider thing...

                                          Either way - if you want your pfSense VM to use a custom mac address on the WAN interface you'll need to allow forged transmits.

                                          I'd also suggest you enable promiscuous mode.

                                          https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-7DC6486F-5400-44DF-8A62-6273798A2F80.html

                                          and

                                          https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-92F3AB1F-B4C5-4F25-A010-8820D7250350.html

                                          and

                                          https://wahlnetwork.com/2013/04/29/how-the-vmware-forged-transmits-security-policy-works/

                                          For good measure also allow mac changes.

                                          Once its all working... you can revert these settings until you know exactly which setting breaks your environment.

                                          To sum this up: on the WAN vSwitch and Portgroup you need to:

                                          • Allow Mac Changes

                                          • Allow Forged Transmits

                                          • Allow Promiscuous Mode

                                          • In pfsense - on the WAN Interface use a Mac Address that has previously worked with your provider

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            marcel1988
                                            last edited by

                                            @kiokoman

                                            These where my settings when i was using the Ubiquiti USG router:
                                            033581ee-a505-4870-84c8-57a7d8279617-image.png

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.