Proxmox + pfSense: Enable Internet for Internal VMs

zikou

Hi everyone,

I'm currently setting up a pfSense VM on Proxmox and would appreciate your guidance on properly configuring it so that VMs on the LAN interface (vmbr2) can access the internet, proxmox is installed on ovh dedicated server.

Network Setup
Proxmox Host

vmbr0: Public IP public-ip/24

vmbr1: 10.10.0.1/24 – used for pfSense WAN

vmbr2: 10.20.0.1/24 – used for pfSense LAN and other internal VMs

pfSense VM

WAN: 10.10.0.252 (connected to vmbr1)

LAN: 10.20.0.252 (connected to vmbr2)

Other VMs

Example: 10.20.0.100 (connected to vmbr2)

Gateway: 10.20.0.252

stephenw10

There should be nothing special required. The default config should allow hosts in the LAN subnet to access anything in the WAN or further upstream.

The biggest issue I'd expect there would be OVH and their weird gateway config. But that would only affect Proxmox in that setup not pfSense.

Zermus

You have nothing routing your vmbr1/2 to your vmbr0 public IP gateway. I use this setup on my colo so pfSense handles that.

vmbr0: Proxmox VE Public IP / pfSense VM WAN public IP
vmbr1: pfSense LAN IP as Gateway for internal VMs

You really don't even need the Proxmox public IP on vmbr0, but I just firewall it off with pve-firewall and have it there so I can monitor VMs rebooting including pfSense without losing connection, but it does take a public IP away for that.

NollipfSense

@zikou Please follow this: https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox-ve.html