• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

cannot access Proxmox VMs after switching to pfSense

Scheduled Pinned Locked Moved General pfSense Questions
proxmox
10 Posts 3 Posters 1.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K
    kal800
    last edited by Jul 6, 2023, 6:42 PM

    Hi,

    I've just replaced my Orbi Pro router with pfSense installed on Xeon based server. I have not made any changes in my network configuration - everything remains the same. There are no VLANs, every host is in the same subnet. I've got WAN interface connected to cable modem in bridge mode, LAN interface is connected to the switch where all remaining devices are plugged in, and Orbi router as an Access Point for wireless usage. Everything works fine, well almost. I am able to access Proxmox host, but I cannot access any VM guest. When I try to ping them, I'm having:

    PING 192.168.1.111 (192.168.1.111): 56 data bytes
    Request timeout for icmp_seq 0
    Request timeout for icmp_seq 1
    ping: sendto: No route to host
    Request timeout for icmp_seq 2
    ping: sendto: Host is down
    Request timeout for icmp_seq 3
    ping: sendto: Host is down
    Request timeout for icmp_seq 4
    ping: sendto: Host is down
    Request timeout for icmp_seq 5

    So, it is clear for me that the firewall blocks the traffic between LAN hosts and Virtual Machines. I believe that the cause could be that several IPs are on the same physical interface of Proxmox server, but I don't have a clue where to seek solution.

    Could you please give me some advise?

    Kal800

    V 1 Reply Last reply Jul 6, 2023, 7:01 PM Reply Quote 0
    • V
      viragomann @kal800
      last edited by Jul 6, 2023, 7:01 PM

      @kal800
      How are the VMs connected to the LAN? Are they bridged to the Proxmox NIC or natted?

      Can you ping a VM from pfSense?

      Are the network settings correct on the VMs (default gateway)?

      K 1 Reply Last reply Jul 6, 2023, 7:11 PM Reply Quote 0
      • K
        kal800 @viragomann
        last edited by Jul 6, 2023, 7:11 PM

        @viragomann said in cannot access Proxmox VMs after switching to pfSense:

        @kal800
        How are the VMs connected to the LAN? Are they bridged to the Proxmox NIC or natted?

        bridge=vmbr0 - that is the network interface setup

        Can you ping a VM from pfSense?

        no, I cannot - the host is down

        Are the network settings correct on the VMs (default gateway)?

        yes, IP and netmask and default gw are correct on VMs - they worked before after all

        V 1 Reply Last reply Jul 6, 2023, 7:53 PM Reply Quote 0
        • V
          viragomann @kal800
          last edited by Jul 6, 2023, 7:53 PM

          @kal800
          I'd suspect that there is a network issue.

          If you ping a VM from pfSense, the system does an ARP request for the IP and if there is a reply the MAC and IP are inserted into the ARP table (Diagnostic > ARP).
          I assume, it fails.

          However, do an investigation of the ARP communication to see if it works.
          In Diagnostic > Packet Capture select LAN interface and ARP protocol, set the detail level to full and start the capture.
          Then try a ping to a VM.
          Stop the capture and check, what you got.

          K 1 Reply Last reply Jul 6, 2023, 8:02 PM Reply Quote 0
          • K
            kal800 @viragomann
            last edited by Jul 6, 2023, 8:02 PM

            @viragomann

            I changed the network device type from "virtio" to Intel E1000 type, and it started to work.

            It is strange, because those IPs were visible on ARP tables before - when it did not work.

            Except Windows VM that uses E1000 as well, but who cares about Windows host after all ;)

            V 1 Reply Last reply Jul 6, 2023, 8:06 PM Reply Quote 0
            • V
              viragomann @kal800
              last edited by Jul 6, 2023, 8:06 PM

              @kal800
              So you installed pfSense on Proxmox?
              Would be worth to mention.

              K 1 Reply Last reply Jul 6, 2023, 8:09 PM Reply Quote 0
              • K
                kal800 @viragomann
                last edited by Jul 6, 2023, 8:09 PM

                @viragomann

                no, it is installed on bare metal. I have just changed network interface type on each of VMs config.

                V 1 Reply Last reply Jul 6, 2023, 8:12 PM Reply Quote 0
                • V
                  viragomann @kal800
                  last edited by Jul 6, 2023, 8:12 PM

                  @kal800
                  I'm wondering, what the switching to pfSense has changed then regarding the VMs network settings. Weird.

                  1 Reply Last reply Reply Quote 0
                  • S
                    stephenw10 Netgate Administrator
                    last edited by Jul 6, 2023, 10:08 PM

                    Mmm, weird indeed. That should make no difference.
                    Kind of 'feels' like something was cached and changing the NIC type cleared it. Guessing though.

                    K 1 Reply Last reply Jul 6, 2023, 10:14 PM Reply Quote 0
                    • K
                      kal800 @stephenw10
                      last edited by Jul 6, 2023, 10:14 PM

                      @stephenw10

                      Well, I've just switched to virtio again, rebooted all of them, and it works... weird indeed.

                      1 Reply Last reply Reply Quote 1
                      1 out of 10
                      • First post
                        1/10
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received