Hetzner Proxmox host + pfSense vm networking
Hello all i cant seem to make this work as i try to follow the guide here https://dannyda.com/2020/06/09/how-to-configure-nat-network-for-virtual-machine-vm-guest-os-on-proxmox-ve-6-2-pve-easily-works-for-vmware-esxi-too/
i have a dedicated server with main ip
and ordered a second ip for pfsense
also ordered a subnet /29 for my vms to get it from pfsense
now my interfaces file is this
auto lo iface lo inet loopback iface lo inet6 loopback auto enp3s0 iface enp3s0 inet static address 178.**.**.75/32 # Hetzner Main IP gateway 178.**.**.65 pointopoint 178.**.**.65 iface enp3s0 inet6 static address 2a01:4f8:120:82f8::1/128 gateway fe80::1 up sysctl -p auto vmbr0 iface vmbr0 inet static address 178.**.**.75/32 Hetzner Main IP bridge-ports none bridge-stp off bridge-fd 0 bridge-maxwait 0 #Second IP for pfsense up ip route add 178.**.**.79/32 dev vmbr0 # subnet up ip route add 88.**.***.40/32 dev vmbr0 up ip route add 88.**.***.41/32 dev vmbr0 up ip route add 88.**.***.42/32 dev vmbr0 up ip route add 88.**.***.43/32 dev vmbr0 up ip route add 88.**.***.44/32 dev vmbr0 up ip route add 88.**.***.45/32 dev vmbr0 up ip route add 88.**.***.46/32 dev vmbr0 up ip route add 88.**.***.47/32 dev vmbr0 # subnet iface vmbr0 inet6 static address 2a01:4f8:120:82f8::2/64 auto vmbr1 iface vmbr1 inet manual bridge-ports none bridge-stp off bridge-fd 0
the problem is when i configure my LAN using second ip i cant ping the host but if i use any of the usable ips from the subnet i can ping it and can access the pfsense dashboard
can anyone help me out pls i am going crazy with this
I have a pfsense on VM on proxmix hetzner host, I dont route ip's from it though but use NAT instead.
However I can tell you I dont have any ip route in the interfaces file for the pfsense ip.
So the setup is something like this.
vmbr0 is the wan switch. physical wan is connected to it.
So no need for proxmox to route ip's for guests.
So remove the ip route commands.
Put on the 178 * 79 ip on pfsense, and use the hetzner assigned gateway ip for it, make sure this is connected to vmbr0, this should be enough to get pfsense internet access.
I have never done a routable wan ip setup behind pfsense for ipv4 though, so needs someone else to chime in for that, but I dont think they should be routed on proxmox either. Hopefully someone can help you on that step.
I had a look at this.
So I would try this.
Add a 2nd virtual nic to pfsense, connect it to vmbr0.
Add the first routable ip to the 2nd nic, set no gateway.
follow rest of guide.