PROXMOX, PFSENSE on KVM to manage networking of VMs

## NOT URGENT BUT I WANT IT FINISHED AS SOON AS POSSIBLE ##

Hello,

I have the following:

a) A Proxmox virtualization server (default install using their ISO image, Debian)

b) A small subnet (public subnet IPv4)

c) An IPv6 subnet

d) And a static public (single) IP (v4)

e) The Proxmox node (for its own protection) is running CSF Firewall ([login to view URL] )

I have installed Pfsense inside a KVM and I want to manage the b,c,d (above) from inside the Pfsense.

The Pfsense will have 2 LANs inside (or 2 VLANs) so that traffic from LAN1 to LAN2 (or opposite) is controlled.

Important 1: I am able to do all this if I create a bridge (in proxmox), assign a usable IP from the subnet and then assign another usable IP to the WAN interface of the Pfsense. Doing this however wastes one IP address for the bridge. I don’t want that. I want to route the subnets directly to the Pfsense so only ONE ipv4 and ONE ipv6 are used for this.

Important 2: The subnet’s gateway IP is NOT on the same subnet (with the subnet itself). This operation is not permitted by default inside Pfsense so a workaround has to be performed. This is described here: [login to view URL]

Note however that my server is not on OVH network.

I have done this approach and although I successfully assigned the 1st usable IP to Pfsense, I was not able to have proper routing to the LANs. It seems that somewhere I am missing something.

You’re required to:

1) Discuss with me the network settings inside the host and the VMs and if you see something wrong then advise on changes.

2) Do the same for the PfSense. If you require access this will have to be done via my PC with Teamviewer

3) After you have finished I will test that communication of VMs work as required.

4) The above implies using both IPv4 and IPv6

More specific details can be discussed privately (but always via Freelancer messaging system).

Please do not bid unless you have advanced knowledge of Pfsense, IPTables (for the host) and TCP/IP (v4 & v6) routing.

If you do not have knowledge of IPv6 then you will have to adjust you bid accordingly.

Any questions please ask. I will discuss with you your approach before accepting your bid.

Thank you

Cisco Seguridad informática Debian Linux UNIX

Nº del proyecto: #5758027

Sobre el proyecto