VMware vSphere

 View Only

  • 1.  ESXi VM install of pfsense WAN address not answering

    Posted Sep 03, 2021 09:33 PM

    I have a 10.x.x.x LAN setup on my ESXi environment.  My home IP address setup is 192.168.x.x.  I installed pfsense on a VM on the same ESXi server so I could NAT the 10.x.x.x VMs to my home 192.168.x.x network.

    I can see the WAN Physical adapter on my home network as it is using DHCP to get an address.

    PROBLEM: any other computer on the home network side cannot "contact" that IP address when using port forwarding or a PASS firewall rule for ICMP.  Meaning, I cannot leverage the IP address.  I cannot ping, ssh, or get to any VM in the 1.x.x.x virtual.

    I have confirmed from the pfsense community on-line that my pfsense policies are setup correctly.  But, for some reason the home network port assigned to the WAN vSwitch/port group in pfsense VM does not respond to anything. It has to be something simple on the VMWare side.  Any ideas or suggestions are appreciated.

     



  • 2.  RE: ESXi VM install of pfsense WAN address not answering

    Posted Sep 06, 2021 12:07 PM

    Enable on the portgroup that your PFsense vm is running (On the security Part of the portgroup) MAC address changes and Forged transmits.

    Example: (change to accept) 

    NicolasAlauzet_0-1630929997150.png

     



  • 3.  RE: ESXi VM install of pfsense WAN address not answering

    Posted Sep 07, 2021 12:06 PM

    Thanks for the response.  Do you mean change those settings to "Accepted"?

    edbreay_0-1631016333666.png

    .. and do this on both the WAN and LAN side of the pfsense VM>

     



  • 4.  RE: ESXi VM install of pfsense WAN address not answering

    Posted Sep 07, 2021 12:35 PM

    I did set them to "Accept", but no change:

    edbreay_0-1631017895904.png

    edbreay_1-1631018082625.png

     

     



  • 5.  RE: ESXi VM install of pfsense WAN address not answering

    Posted Sep 08, 2021 11:24 AM

    I'm kinda lost. I have some questions to try to understand a little bit more your scenario:

    1- You have only 1 pNIC on the ESXi and its connected to your router right?
    2- Everything is in the default VLAN for your router, also the internal configuration of PFsense? Remember in ESXi the vLAN 0 is whats considered 1 in the rest of the world
    3- The other VMs that are inside the Portgroup with your PFsense can ping the server?

    4- From any other VM in the portgroup can you ping the router outside?