pfsense inside Proxmox

dave.opc · Jun 24, 2018, 6:20 PM

Good day all

I have got a question. If i install pfsense as a VM in Proxmox, and use it as main firewall for other VMs and PCs on LAN, will the Proxmox itself be accessible? Will it get IP address from pfsense DHCP server on LAN interface?

ivor · Jun 24, 2018, 6:33 PM

Did you check the Proxmox guide? https://www.netgate.com/docs/pfsense/virtualization/virtualizing-pfsense-with-proxmox.html

dave.opc · Jun 24, 2018, 6:35 PM

@ivor
Of course i did, though i didn't find the answer to my question. It's only the instruction on how to install pfsense into Proxmox. I need to know how do i access Proxmox after.

ivor · Jun 24, 2018, 6:40 PM

You should be able to access it if you followed instructions correctly. In the guide it shows you how to create two bridges, LAN and WAN. You should be able to access it via LAN assuming everything is correctly configured. Are the two bridges marked active?

dave.opc · Jun 24, 2018, 8:31 PM

Thanks for reply, ivor

I haven't installed it yet, just wanted to know prior installation. So basically Proxmox will receive an IP address from pfsense's DHCP server, and it will be accessible from LAN side (PC behind WiFi router, connected to LAN, for example)?

ivor · Jun 25, 2018, 7:21 AM

It'll make more sense once you actually start working on it :)

Your proxmox will have two NIC's, and once you assign the bridges to LAN / WAN, simply plug in to LAN and you will be able to access pfSense.

dave.opc · Jun 25, 2018, 7:21 AM

@ivor said in pfsense inside Proxmox:

simply plug in to LAN and you will be able to access pfSense.

Once again :) I was asking about access to Proxmox server from LAN, not the pfsense...

viragomann · Jun 25, 2018, 11:08 AM

Use a network bridge on Proxmox for LAN and assign an IP address to it.

dave.opc · Jun 25, 2018, 11:12 AM

@viragomann
Thank you, will try

ivor · Jun 26, 2018, 6:53 PM

@dave-opc Sorry! I missed the "will the Proxmox itself be accessible" part. @viragomann is correct there.

blackpaw29 · Jun 30, 2018, 7:24 AM

@dave-opc I would recommend against the proxmox host receiving its ip from a VM its running, that way lies madness ... especially when you reboot the host and it can't acquire an ip as the VM isn't running.

Static ip for the proxmox host. If you want everything on the same subnet with pfSense handing out IP's then reserve the proxmox host IP's in pfSense. Everything thats on the LAN side of pfSense will be able to access each other.

Will pfSense be handling your WAN connection as well?

nb. I'm just finishing migrating our WAN gateway to pfSense virtualised on a proxmox cluster. No issues with access to proxmox and clients.

dave.opc · Jun 30, 2018, 9:56 AM

@blackpaw29
That makes sense.

viragomann · Jul 2, 2018, 10:01 AM

@blackpaw29
The Proxmox machine is a server. It's never a good idea to have a dynamic IP on a server, of course.

The Proxmox host machine should have a static IP in the LAN where also your management PC has an IP. So there's no need to have the virtualized firewall up and working to get access to the host machine.