Issues with Proxmox and pfsense interface
-
I've installed pfsense as a guest on proxmox running on a dell R720. It installs fine with the wan interface set up, but when I assign a LAN interface and set it to a static ipv4 address (not enabling it) I wait a few minutes and The webgui takes a dirt nap saying it took to much time to load. I stopped the vm, doubled the cpu core to 4 and increased the ram to 8 gigs and restarted it. Still no good. I can go through the console interface and remove the LAN interface and the webgui comes back, but I need a few interfaces for learning.
Some other info:
The wan interface is set to 192.168.60.30/24
The lan interface is set to 192.168.30.1/24 (I've tested other values, all with a subnet of /24 with the same result)
I've not set any firewall rules or traffic shaping.
I've disabled Hardware Checksum offloading as well as TSOAnyone know what could be causing this and how I can fixed?
Thanks
-
I'm an idiot. This wasn't working because I didn't add a rule to the WAN interface to allow traffic in. Once I did that it worked fine.
-
@thedraketaylor said in Issues with Proxmox and pfsense interface:
I didn't add a rule to the WAN interface to allow traffic in
Have you defined two virtual interfaces on your VM?
- You need a rule to allow traffic from your lan into pfsense
- You do not normally need a rule to allow traffic from the internet / WAN into pfsense as most of this traffic occurs via the stateful firewall ie in response to traffic from the LAN.
For the default WAN and LAN required rules are added by default.
-
If you assign only one interface in pfSense it is named 'WAN' but the default allow rules and anti-lockout rules are applied to it. It is accessible from anywhere at the WAN IP, 'appliance mode'.
As soon as you add a second interface pfSense starts to work firewall mode. The default rules are moved to LAN and access from the WAN side is blocked.
That's almost certainly what happened here.Steve
-
Exactly, what I failed to mention in my post (because I'm an idiot) was that this was an internal pfsense vm. Once I added the second interface, it expected me to access it from the LAN interface, which I was not doing.
Thanks!
