Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfsense vm no traffic on lan for other VMs

    Scheduled Pinned Locked Moved Virtualization
    15 Posts 3 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      AssadJ @viragomann
      last edited by

      @viragomann so are you saying i should setup a vlan on my physical pfsense, the dc is in proxmox behind the pfsense vm so the win 10 vm should be able to see the dc and join it even if outbound nat is set no?

      V KOMK 2 Replies Last reply Reply Quote 0
      • V
        viragomann @AssadJ
        last edited by

        @assadj
        So the DC and the VM you want to join are both VMs and reside in the some network segment?
        I was talking about communication between devices in front and behind the pfSense VM.
        These cannot talk together, because the device in front might not have a route the the network behind the pfSense VM.

        With a transit network you simply set the routes on the router and the devices have only to use their default route to communicate with the other network and the world.

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM @AssadJ
          last edited by KOM

          @assadj If the dc and win10 vms are on the same network then pfSense is not involved at all. In that Windows domain config, it's usually best to let the dc handle DNS and DHCP. You probably have pfSense set to do that.

          As for outbound NAT, hybrid is what I use. However, we don't know what you have done for rules etc so maybe its best to restore a default pfSense config and move forward from there now that you know outbound NAT rules are not your problem.

          A 1 Reply Last reply Reply Quote 0
          • A
            AssadJ @KOM
            last edited by

            @kom so the vms and pfsense vm are setup with bridge for wan to my private home network and a seperate lan which pfsense vm is managing for the vm in proxmox. yes i have set dhcp and dns to be pfsense should i turn both off on pfsense vm?

            KOMK 1 Reply Last reply Reply Quote 0
            • KOMK
              KOM @AssadJ
              last edited by

              @assadj I would. While you can get it working wit pfSense handling those, it seems to cause fewer problems if you let Windows do it when in an AD environment.

              A 1 Reply Last reply Reply Quote 0
              • A
                AssadJ @KOM
                last edited by

                @kom how can i turn off dns from pfsense, do i just disable dns resolver? and how can i allow dns to be provided by the dc. sorry just a noob asking loads of questions.

                KOMK 1 Reply Last reply Reply Quote 0
                • KOMK
                  KOM @AssadJ
                  last edited by

                  @assadj You don't need to turn it off, you just need your clients to not use it for DNS. Turn off the pfSense DHCP server, turn on & configure the Windows AD DHCP and DNS.

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    AssadJ @KOM
                    last edited by

                    @kom ok great thanks

                    KOMK 1 Reply Last reply Reply Quote 0
                    • KOMK
                      KOM @AssadJ
                      last edited by

                      @assadj You can tell Windows DNS servers to forward to pfSense so you can still take advantage of packages like pfBlocker.

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        AssadJ @KOM
                        last edited by

                        @kom ok great yeah ive set a dns forwarder for my windows dns server.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.