OVH Community, your new community space.

ESXi + Bridge Client + pfSense


makno
23-11-2010, 18:14
Quote Originally Posted by guy
Thanks!!

1.4 seems to automatically assign my red ethernet card to my green one even when its not connected!
can't really remember the details of how i set that up but i think i had to manually swap the mac addresses in the config files to get it working properly as i think it kept giving the red interface the wrong card no matter how i tried.

if you keep having problems let me know and i'll check on it cause i still have the ipconfig running

hokapoka
23-11-2010, 11:23
opps double post

hokapoka
23-11-2010, 11:22
Hey there

I had a world of difficulty getting BSD based firewalls to "play nice" with OVH's Virtual MACs & the default gateways.

I ended up opting for a linux distro and used shorewall - worked a treat first time.

Really simple to setup, install a bare bones linux, say ArchLinux / Debian, get it's Virtual MAC address working as per the normal docs with eth0, add another nic, or 2 one for your LAN and another for your DMZ and follow the shorewall install guides.

You should have it up and running in an hour or 2 at most.

If you have any issues give me a shout.

guy
23-11-2010, 06:27
Thanks!!

1.4 seems to automatically assign my red ethernet card to my green one even when its not connected!

makno
23-11-2010, 01:03
on version 1.4:
keep in mind my proxmox server has ip: 188.165.209.xx

/etc/rc.d/rc.local looks like this:
#!/bin/sh
route add 188.165.209.254 dev eth1
route add default gw 188.165.209.254

and /var/ipcop/ethernet/settings looks like this:

CONFIG_TYPE=2
GREEN_DRIVER=pcnet32
GREEN_DRIVER_OPTIONS=
GREEN_DEV=eth0
GREEN_DISPLAYDRIVER=pcnet32
GREEN_ADDRESS=192.168.1.1
GREEN_NETMASK=255.255.255.0
GREEN_NETADDRESS=192.168.1.0
GREEN_BROADCAST=192.168.1.255
ORANGE_DEV=
BLUE_DEV=
RED_DEV=eth1
RED_DRIVER=8139too
RED_DRIVER_OPTIONS=
RED_DISPLAYDRIVER=8139too
RED_DHCP_HOSTNAME=ipcop
RED_ADDRESS=94.23.xx.xx (your failover ip)
RED_NETMASK=255.255.255.255
RED_TYPE=STATIC
RED_NETADDRESS=94.23.xx.xx (put your failover ip)
RED_BROADCAST=94.23.xx.xx (put your failover ip)
DNS1=208.67.222.222
DNS2=208.67.220.220
DEFAULT_GATEWAY=188.165.209.254

guy
22-11-2010, 19:28
Im using 1.9,

Will try 1.4 then if you used that.

Could i see a copy of your rc.event.local file and settings file? Just want to make sure it matches up (delete your IP's in them )

makno
22-11-2010, 18:25
what version of ipcop? i managed with 1.4 without problems but no success with 1.9 :\

guy
21-11-2010, 23:31
In FreeBSD Where would i find these settings to change in BSD

guy
21-11-2010, 23:16
Ty

guy
21-11-2010, 21:48
DigitalDaz, Thanks! I tired looking for files to add those config with pfsense but couldnt so trying to configure the ipcop now to see how i get on

DigitalDaz
21-11-2010, 14:49
pfSense is based on FreeBSD

makno
20-11-2010, 17:47
not much of a clue sorry, i just got it working and din't dig too much into it

guy
20-11-2010, 17:42
Thanks

Ill take a look and see if i can get it to work

Seems just like what i wanted

I wonder what its based on, FreeBSD?

makno
20-11-2010, 17:40
this might help:

http://www.ipcops.com/phpbb3/viewtopic.php?f=17&t=14119

makno
20-11-2010, 17:36
yes, i use it on proxmox:

failover routed to a vps with ipcop (firewall/router distro)
other small vps connected to ipcop as if it was a normal router.

check ipcop forum to check for the ip config, i believe it will be the same on pfsense

guy
20-11-2010, 12:12
Then could i use the Failover IP for the ESXi Management Console and use the static IP for PFSense?

marks
19-11-2010, 11:33
Well, pfSense is a firewall distribution, so I'm not sure how that fits in the ESXi structure.

In any case, all this information has to be put in the VM OS, and therefore is depending on the OS for your VM.

the guide:
htttp://help.ovh.co.uk/BridgeClient

give some examples for some distributions

guy
19-11-2010, 01:28
Hello,

I've done most which i need to finish but i cant get the last part in the guide

http://help.ovh.co.uk/BridgeClient#link6

Code:
/etc/network/interfaces
auto lo eth0
iface lo inet loopback
iface eth0 inet static
address IP Failover
netmask 255.255.255.255
broadcast IP Failover
post-up route add Dedicated Server IP but end in .254 dev eth0
post-up route add default gw Dedicated Server IP but end in .254
post-down route del Dedicated Server IP but end in .254 dev eth0
post-down route del default gw Dedicated Server IP but end in .254
I cant find this file in pfSense so that i could all the details in.

Could someone give me a pointer?

I've got my Failed IP's, Virtual Macs, got the WAN on the pfSense to have the corrent failover IP and the gateway of .254 of my server ip.

But im not sure how to do the last part on pfSense.

Any help would be great