pfSense VPS on ESXi
takefocus
07-05-2011, 18:56
@ DJP - I'd be interested how you get on with this.
I have IPCop runing as a VM in Proxmox, but limiting factor for me here is it's inability to support multiple WANS.
I am going to give this another shot following this guide:
http://blog.magiksys.net/pfsense-fir...fferent-subnet
shawsystems
20-08-2010, 11:24
Hello All.
I have the same problem. I tried posting to the pfsense forum too but had no joy there.
http://forum.pfsense.org/index.php/topic,27205.0.html
I too have tried all of the above suggestions.
I hope someone can help.
I am still no further with this project, does pfSense or any other router work on a VM in ESXi with a public IP and a gateway on a different network with a subnet that does not match?
Hi
I just tried to get help from the OVH network people, but am told that its hard to get them interested as what I am trying to do is not supported (what exactly is supported I wonder?).
Before I walk from OVH, this is a last call for help from anyone who may have cracked making a router with a public IP (failover) on the outside.
Many Thanks
Hi Myatu
I tried the explicit route with no joy. In shell I am trying
Route add 0.0.0.0/1 188.xx.xx.254/32
and it reports
route: bad address: 188.xx.xx.254/32
Hope you have more ideas as I have been fresh out for a while now.
Many thanks for your help.
Best Regards
Bill
Hi Myatu
I still can not ping the ESXi host ip from the pfSense VM, but cant see how to add a specific route. You have a Destination Network with a choice of 1 to 32 for the subnet and a gateway address with no subnet. I have tried rputing the VM ip to the gateway and still I can not even ping the ESXi host. Can you give nme any more clues please?
All help gratefully recieved.
Best Regards
Bill
Right, just the bit I can't remember of the top of my head I do believe I managed this from the shell, as you can't leave the gateway empty although you could try anyway (or try a self-reference, so network 188.xx.xx.254/32 and gw of 188.xx.xx.254 - as long as it's on the WAN).
Hi Myatu
It doesnt work without the explicit route, how do I add that?
Best Regards
Bill
My bad, 1 it is (not zero)
Hi Myatu
I tried to do this earlier but there is a dropdown for the subnet with no zero only a choice of 1 to 32.
Best Regards
Bill
You do this within pfSense itself. It's System > Static Routes. Then click on the + on your right hand side to add a new route to the WAN adapter. So Network 0.0.0.0/0, Gateway 188.xxx.xxx.254; for pfSense it should be enough AFAICR, but you may have to add an explicit route to 188.xxx.xxx.254/32 on the same WAN interface as well.
Still cant get it to work. Added the route to the VMhost as follows
esxcfg-route -a 0.0.0.0/0 188.xxx.xxx.254
No change. Still cant ping the host IP of 188.xxx.xxx.64 from the pfSense vm on 94.23.xxx.xxx.
Is this what you meant?
Thanks for the info, but how do I do that? Everytime I try entering the route via shell, it doesnt like the gateway address and I cant find a way of doing this via the GUI.
Doh! Just realised you mean on the ESXi host. Trying that now.
You have to add a default route (0.0.0.0/0) on the WAN adapter / gateway.
I have the same question regarding pfSense. I have installed as a guest on ESXi using a failover IP for the WAN and a 192.168.xxx.xxx for the LAN. I have the gateway set to the ESXi Host IP but ending in 254.
It all installs fine, I can ping the LAN but nothing on the outside.
Has anyone got past this stage?
we've never tried but if you want to install that to run in ESXi, you have to consider that it's a very specific OS, and it'll have to be compatible. Good luck with that!
Has anyone had any luck getting pfSense to work as a host on ESXi using a failover IP?
I have followed the BSD bridge guide but since pfSense does its config via a web interface that generates an .xml file I havent been able to get it working.
WAN interface is failover IP/32
Gateway is ESX server main IP ending in .254
Do I have to add any routes?
Ideas?
