Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense on esxi 6.7, can get it to work propperly.

    Scheduled Pinned Locked Moved Virtualization
    57 Posts 5 Posters 9.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • kiokomanK
      kiokoman LAYER 8
      last edited by

      indeed 4095 means that you set your vswitch as a trunk port letting any vlan pass through

      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
      Please do not use chat/PM to ask for help
      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

      1 Reply Last reply Reply Quote 0
      • M
        marcel1988
        last edited by

        Yes, this did the trick :)

        1 Reply Last reply Reply Quote 0
        • M
          marcel1988
          last edited by

          so after a few day's working perfectly.
          it now randomly stops working.

          In the PfSense VM i see this:
          c976ee3a-a7be-4787-8189-6d7008e1c6b1-image.png

          When i reboot the VM everything works again.
          What can this be?

          1 Reply Last reply Reply Quote 0
          • kiokomanK
            kiokoman LAYER 8
            last edited by kiokoman

            try to reinstall open-vm-tools
            maybe do a fsck also

            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
            Please do not use chat/PM to ask for help
            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

            1 Reply Last reply Reply Quote 0
            • M
              marcel1988
              last edited by marcel1988

              @kiokoman

              i have reinstalled the open-vm-tools and nothing changed
              what you mean by fsck?

              And what about the new update?
              i'm now on:

              2.4.4-RELEASE-p3 (amd64)
              built on Wed May 15 18:53:44 EDT 2019
              FreeBSD 11.2-RELEASE-p10

              1 Reply Last reply Reply Quote 0
              • kiokomanK
                kiokoman LAYER 8
                last edited by kiokoman

                fsck: from console is option 5 and F key ( F: Reboot and run a filesystem check )
                and yes, upgrade to 2.4.5

                ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                Please do not use chat/PM to ask for help
                we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                1 Reply Last reply Reply Quote 0
                • M
                  marcel1988
                  last edited by

                  ok now i understand what you mean. i just did that a couple of hours ago and it seems to work again.
                  What about the update?

                  after the update i need to reinstall vm-tools again? and another fsck?

                  1 Reply Last reply Reply Quote 0
                  • kiokomanK
                    kiokoman LAYER 8
                    last edited by

                    nope, no need, make a backup of your config just in case and do the upgrade

                    ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                    Please do not use chat/PM to ask for help
                    we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                    Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                    1 Reply Last reply Reply Quote 1
                    • M
                      marcel1988
                      last edited by marcel1988

                      Still this is not working fine. My internet disconnects every 4-5 hour.
                      So can you please check my settings and tell me if the are right:

                      First off all, the network settings:

                      1. ESXI WAN settings: + VLAN ID 4095
                        2a5c04f0-4638-4c0e-a37f-0610d4012047-image.png

                      2. ESXI LAN settings:
                        084a34a8-f224-4852-abba-0c44361b92f8-image.png

                      3. PfSense settings:
                        75daa62b-5e52-49d2-af2f-ec083f56d2b4-image.png

                      Cable managment:

                      WAN T-mobile > WAN Port intel NIC ESXI
                      LAN Port intel NIC > port 1 into standard network switch. ( not managed )
                      port 2 network switch > Onboard LAN port of ESXI server for managment.
                      The rest of the network ports of the switch are 2 Ubiquiti WIFI accespoint, and some computers.

                      As you can see, i also installed OpnSense just to find our of PfSense was the problem.
                      But also OpnSense has the same problems.

                      1 Reply Last reply Reply Quote 0
                      • kiokomanK
                        kiokoman LAYER 8
                        last edited by

                        it's ok, was the cable removed during this screenshot i suppose? physical adapters are not green
                        if you are using igbn (native esxi driver) try to install net-igb (intel driver for esxi)

                        Immagine.jpg

                        also install open-vm-tools from pfsense packages if you didn't already

                        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                        Please do not use chat/PM to ask for help
                        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                        1 Reply Last reply Reply Quote 0
                        • M
                          marcel1988
                          last edited by

                          Yes, the cable is removed otherwise i dont have good internet ofcourse :)

                          Both the drivers are installed:
                          c156b52c-3b20-45e0-8132-bed43bde2ec2-image.png

                          Also the package in PfSense for open-vm-tools is installed.

                          1 Reply Last reply Reply Quote 0
                          • kiokomanK
                            kiokoman LAYER 8
                            last edited by

                            idk, settings are ok, maybe do a backup of your configuration ad reinstall a new clean vm with pfsense 2.4.5 or try 2.5.0

                            ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                            Please do not use chat/PM to ask for help
                            we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                            Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                            1 Reply Last reply Reply Quote 0
                            • Cool_CoronaC
                              Cool_Corona
                              last edited by

                              Can I get a Teamviewer into the box... then I will have your ESXi/pfsense running in 5 mins

                              1 Reply Last reply Reply Quote 0
                              • M
                                marcel1988
                                last edited by

                                @kiokoman
                                I have tried freshinstall of 2.4.5 and 2.5.0
                                I have tried backing up and restoring.

                                Maybe te problem is the fact i dont enter a MAC-ADDRESS into the wan port of the T-mobile fiber?
                                and i leave the MTU also clear?

                                @Cool_Corona
                                if you can do it in 5 minutes. you can also tell me how ;)

                                1 Reply Last reply Reply Quote 0
                                • kiokomanK
                                  kiokoman LAYER 8
                                  last edited by

                                  that would be something specific to your isp 🤷

                                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                  Please do not use chat/PM to ask for help
                                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    marcel1988
                                    last edited by

                                    So i tried adding a MAC-ADDRESS but then there is no internet at all.
                                    Where in PfSense can i find a log? so maybe i can see where the problem is occurring.

                                    1 Reply Last reply Reply Quote 0
                                    • kiokomanK
                                      kiokoman LAYER 8
                                      last edited by kiokoman

                                      all logs are under status / system log
                                      what kind of connection is it? pppoe ? dhcp? static or dynamic ip?

                                      ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                      Please do not use chat/PM to ask for help
                                      we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                      Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                      1 Reply Last reply Reply Quote 0
                                      • G
                                        gcu_greyarea
                                        last edited by gcu_greyarea

                                        I have a cable modem and for testing purposes I have been switching between a pfSense VM and physical appliances.

                                        Not sure why - but my connection is stable with the mac address used when the connection was first setup. This may be a provider thing...

                                        Either way - if you want your pfSense VM to use a custom mac address on the WAN interface you'll need to allow forged transmits.

                                        I'd also suggest you enable promiscuous mode.

                                        https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-7DC6486F-5400-44DF-8A62-6273798A2F80.html

                                        and

                                        https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-92F3AB1F-B4C5-4F25-A010-8820D7250350.html

                                        and

                                        https://wahlnetwork.com/2013/04/29/how-the-vmware-forged-transmits-security-policy-works/

                                        For good measure also allow mac changes.

                                        Once its all working... you can revert these settings until you know exactly which setting breaks your environment.

                                        To sum this up: on the WAN vSwitch and Portgroup you need to:

                                        • Allow Mac Changes

                                        • Allow Forged Transmits

                                        • Allow Promiscuous Mode

                                        • In pfsense - on the WAN Interface use a Mac Address that has previously worked with your provider

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          marcel1988
                                          last edited by

                                          @kiokoman

                                          These where my settings when i was using the Ubiquiti USG router:
                                          033581ee-a505-4870-84c8-57a7d8279617-image.png

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            marcel1988
                                            last edited by marcel1988

                                            ok, again the internet stopt working and i pull this out the logfile:

                                            Apr 6 14:32:33 check_reload_status updating dyndns wan
                                            Apr 6 14:32:33 check_reload_status Syncing firewall
                                            Apr 6 14:32:33 php-fpm 2504 /interfaces_assign.php: Creating rrd update script
                                            Apr 6 14:32:45 check_reload_status Syncing firewall
                                            Apr 6 14:32:49 check_reload_status Syncing firewall
                                            Apr 6 14:32:52 login login on ttyv0 as root
                                            Apr 6 14:33:06 login login on ttyv0 as root
                                            Apr 6 14:33:52 php-fpm 2504 /interfaces.php: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP'
                                            Apr 6 14:33:52 php-fpm 2504 /interfaces.php: Gateway, none 'available' for inet6, use the first one configured. ''
                                            Apr 6 14:33:52 check_reload_status Restarting ipsec tunnels
                                            Apr 6 14:33:54 php-fpm 2504 /interfaces.php: Unbound /var/unbound/root.key file is corrupt, removing and recreating.
                                            Apr 6 14:33:56 check_reload_status updating dyndns wan
                                            Apr 6 14:33:56 kernel vlan0: changing name to 'vmx0.300'
                                            Apr 6 14:33:58 check_reload_status Reloading filter
                                            Apr 6 14:33:58 php-fpm 2504 /interfaces.php: Creating rrd update script
                                            Apr 6 14:34:24 check_reload_status rc.newwanip starting vmx0.300
                                            Apr 6 14:34:24 php-fpm 340 /interfaces_assign.php: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP'
                                            Apr 6 14:34:24 php-fpm 340 /interfaces_assign.php: Default gateway setting Interface WAN_DHCP Gateway as default.
                                            Apr 6 14:34:24 php-fpm 340 /interfaces_assign.php: Gateway, none 'available' for inet6, use the first one configured. ''
                                            Apr 6 14:34:24 check_reload_status Restarting ipsec tunnels
                                            Apr 6 14:34:25 php-fpm 2504 /rc.newwanip: rc.newwanip: Info: starting on vmx0.300.
                                            Apr 6 14:34:25 php-fpm 2504 /rc.newwanip: rc.newwanip: on (IP address: REMOVED FOR PRIVACY!!!!!!) (interface: []) (real interface: vmx0.300).
                                            Apr 6 14:34:25 php-fpm 2504 /rc.newwanip: rc.newwanip called with empty interface.
                                            Apr 6 14:34:25 php-fpm 2504 /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - -> REMOVED FOR PRIVACY!!!!!! - Restarting packages.
                                            Apr 6 14:34:25 check_reload_status Reloading filter
                                            Apr 6 14:34:25 check_reload_status Starting packages
                                            Apr 6 14:34:26 php-fpm 341 /rc.start_packages: Restarting/Starting all packages.
                                            Apr 6 14:34:26 php-fpm 340 /interfaces_assign.php: Unbound /var/unbound/root.key file is corrupt, removing and recreating.
                                            Apr 6 14:34:26 login login on ttyv0 as root
                                            Apr 6 14:34:29 check_reload_status updating dyndns wan
                                            Apr 6 14:34:29 check_reload_status Syncing firewall
                                            Apr 6 14:34:29 php-fpm 340 /interfaces_assign.php: Creating rrd update script
                                            Apr 6 14:35:01 pkg-static pfSense-repo upgraded: 2.4.5 -> 2.4.5_2
                                            Apr 6 14:35:09 check_reload_status Syncing firewall
                                            Apr 6 14:35:14 pkg-static fusefs-libs-2.9.9_1 installed
                                            Apr 6 14:35:14 pkg-static libdnet-1.13_3 installed
                                            Apr 6 14:35:14 pkg-static libmspack-0.10.1 installed
                                            Apr 6 14:35:14 pkg-static open-vm-tools-nox11-11.0.1_2,2 installed
                                            Apr 6 14:35:14 php /etc/rc.packages: Beginning package installation for Open-VM-Tools .
                                            Apr 6 14:35:14 check_reload_status Syncing firewall
                                            Apr 6 14:35:14 check_reload_status Syncing firewall
                                            Apr 6 14:35:14 php /etc/rc.packages: Successfully installed package: Open-VM-Tools.
                                            Apr 6 14:35:14 pkg-static pfSense-pkg-Open-VM-Tools-10.1.0_2,1 installed
                                            Apr 6 14:35:16 check_reload_status Reloading filter
                                            Apr 6 14:35:16 check_reload_status Starting packages
                                            Apr 6 13:34:57 php-fpm 340 /rc.start_packages: Restarting/Starting all packages.
                                            Apr 6 14:35:18 kernel VMware memory control driver initialized

                                            After a reboot of the ESXI host, everything is working again.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.