Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    CentOS KVM - Pfsense communication problem on LAN virtual network

    General pfSense Questions
    2
    6
    1967
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gsurina last edited by

      Hello,

      I am using pfsense_2.1 on CentOS KVM with 1 physical NIC (bridge mode) and two virtual NIC (I have tried e1000, virtio, …).
      Pfsense is configured:
      1. LAN is on a virtual network - 1 virtual centOS00 is connected on it (GATEWAY - PfsenseLAN ip)
      2. WAN is on a virtual network - 1 virtual centOS01 is connnected on it (GATEWAY - PfsenseWAN ip)
      3. OPT1 is on bridged physical NIC - connection with outside world

      After initial configuration everything works fine. I can ping from LAN (CentOS00) to WAN network(CentOS01). Defaul LAN rules passes the ping.
      The problem is when i restart virtual server in LAN (CentOS00). After that I can not ping WAN interface, or OPT interface, or virtual mashine in WAN/OPT network.
      I thing that the problem is routin in LAN->WAN/OPT, because if I configure the LAN network again (web configurator or console - set ip address) then I can again ping from LAN->WAN/OPT.
      I have used pfsense on VMware and did not have this kind a problem. Maybe I must use other drivers for pfsense !?
      Please help,
      Kind regards, Goran

      1 Reply Last reply Reply Quote 0
      • stephenw10
        stephenw10 Netgate Administrator last edited by

        Your configuration seems a bit odd though not perhaps entirely unreasonable. What are you doing with this setup?

        I would normally expect the WAN interface to be the connection with the outside world.

        Steve

        1 Reply Last reply Reply Quote 0
        • G
          gsurina last edited by

          Yes, but I need zoning with three network zones. When I get this to work, next step is to put
          another PfSense that will be infront of this one and WAN interface of the second PfSense will be connection to the internet.
          When I do that I will have three network zones.
          Regards,
          Goran

          1 Reply Last reply Reply Quote 0
          • stephenw10
            stephenw10 Netgate Administrator last edited by

            Ok. You can almost certainly do whatever it is you're trying to accomplish with one pfSense instance and multiple NICs.

            Why do you not have the WAN interface bridged to the physical NIC? Unless you have changed the default config all outgoing traffic is routed via the WAN. This isn't going to work if WAN has no connectivity.

            I would use e1000 virtual NICs unless you need something provided by the virtio driver. There are a number of threads on getting that working.

            I assume you have different subnets on each interface?

            Please give more details on your IP setup. A diagram would probably help a lot here.

            Steve

            1 Reply Last reply Reply Quote 0
            • G
              gsurina last edited by

              Hi Steve,
              Thank you for the reply.
              the issue is solved. The problem was the same as in this topic:
              http://forum.pfsense.org/index.php?topic=51817.0

              In short, i did not know that when you create VLAN on KVM, then the VLAN use first available address from that network. In my
              case that was 172.16.1.1. I use that address on the FW LAN interface. Because of that I have had ip conflict that made mess with arp tables.

              Regards, Goran

              1 Reply Last reply Reply Quote 0
              • stephenw10
                stephenw10 Netgate Administrator last edited by

                Ah, OK. Glad you resolved it.  :)

                Steve

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post