Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Mac of gateway on lan interface with vmware ESX 3.0.1

    Scheduled Pinned Locked Moved Virtualization
    3 Posts 1 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      daniel
      last edited by

      Hi

      I tried to set up a transparent firewall with pfsense, but without any luck.

      My situation:

      I have a public ip range.
      All of my hosts have an public ip.
      I want to place those hosts behind a pfsense router.
      I create a new virtual switch (sw02) without physical interface connected to it.
      I connect one virtual network from a testhost with public ip to sw02. Then I connected one ethernet card (le1) to the virtual switch sw02( as LAN).
      Then I connected the second virtual networkcard (le0) to the switch that is connected to the nic that has internet access.

      PFsense configuration:
      disabled nat
      allow traffic from lan to any
      allow traffic from any to lan

      I can ping from the testhost to LAN and WAN interface of pfsense, but not any other hosts.
      I can acces the web configuration page of pfsense from the internet.

      I found out that the mac address of our gateway is detected on the wrong network interface.
      The pfsense arp table says that the mac address of our gateway is on the LAN interface instead of the WAN interface

      1 Reply Last reply Reply Quote 0
      • D
        daniel
        last edited by

        I found out the following:

        Packets are ariving at our switch that is connected to our ISP.
        The arp requests are getting an FSC ( Frame Check Sequence  error) when passing to the bridge.
        When I connect the machine directly to the switch everything is ok

        1 Reply Last reply Reply Quote 0
        • D
          daniel
          last edited by

          the frame check error had nothing to do with the fact that virtual machines behind the firewall couldn't connect to the internet.
          The vswitch connected to the public network needed to reconfigured to accept promiscious mode

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.