Hi, i'm abit aconfuse here, if i setup nested ESXI should I be install pfsense on the main vmhost rather than inside vcenter on the vitual host? i coun't figure it out how to setup vSwitch to test vlan etc...
@crvsys thank you for the comment! If you don't mind, create a topic on the forums and I can give more detailed help and answer questions there: www.virtualizationhowto.com/community
Is there anyway to get this up and running without having to select the WAN/LAN right now? I'm running a Ubiquiti USG Pro-4 for a router/firewall. I would like to be able to setup pfSense first before removing the Pro-4.
This is great but I was hoping to see if it’s worth jumping through hoops and enabling SR-IOV on the nic with the wan port (or even LAN). Not sure if it makes any performance difference. I’m not experiencing any issues with my 300/30mbps cable connection.
@@VirtualizationHowto Thanks, yeah I test at my packaged rate and I did an iperf test from my hardwired pc to the pfsense vm (you can enable iperf server in pfsense gui) and got 940mbps over gigabit ethernet, which after overhead is pretty much expected. So seems ok for now! Maybe in some intense 10gigabit networks it could make sense, but for the home user, I think were all good!
I've been racking brain over this for a couple of days now, I don't even know if I need pfsense for my problem. I'm running an esxi host on my home network. I have some virtual machines that need to communicate with the internet, and I have other virtual machines that I want to only communicate with physical machines on my LAN. I have one NIC on my system now (using an old desktop) and I'm pending a second NIC in the mail. My thoughts are that I'll create two separate virtual switches, SW1 with NIC1 for Internet traffic and SW2 with NIC2 for LAN traffic. With this setup, both NICs will still be facing the internet via my router though, right? Should I use NAT on pfsense to route SW1 to the internet and route SW2 to my LAN? If you could please share your thoughts, that would be greatly appreciated. Starting my home lab has proven to me that I don't know as much as I thought I did about networking/virtualization.
Great work, thank you. Would like to ask your opinion on the security side of this, since the WAN port running on ESXi is exposed directly to the internet. have you had any security problems? Are you running this for production? I see some comments round the internet saying dont virtualise the firewall, but if you have not had any issues, i will probably take the plunge and start using a virtualised firewall. I am just concerned for the security side of it. TIA
Hi, Thank you for this video, were you able to install the VMware tools on this virtual machine ? and also is it possible to do the configurations which you have done over UI through commands or script ?
I have a few questions. I am using a simple ESXi install without VCenter. I have a mini-PC with 6 X 2.5Gbit ports. One port will be the WAN port. One will be for management, which leaves 4 ports left. How would you configure your VSwitches and port groups? I would like to emulate the bridging feature that bare metal PFSense has by ganging multiple ports as a switch with a shared IP address. Is this possible? I am also thinking about using one port as a backup subnet and maybe using one as a heartbeat network if I choose to make have this managed by a VCenter.
Rico, thanks for your comment. In vSphere portgroups this is easily accomplished. You create your vSwitches and assign the network adapters to them. So, if you want a WAN vSwitch backed by 2 adapters, you would create the vSwitch, tag your VLAN if using VLANs, and add the adapters. This would be the same process for your LAN ports. You would then just place your virtual machine connected to the appropriate vSwitches. Does this help?
@@VirtualizationHowto Right now, I am only using ESXi 7 without any VCenter. I changed the NIC to E1000e, which helped. Two nodes attached to two NICs now are picking up an IP via DHCP. But I am still not able to connect to the pfsense GUI from the 2 nodes attached if both NICs are connected. What should be the teaming policy? Basically, I want this firewall to work within the virtual environment and outside it also.
Andrew, yes this is definitely doable. It just involves creating the appropriate VLANs and network uplinks plumbed into the correct interfaces of your virtual pfSense router. The physical desktop doesn't know any difference between a virtual or physical router. Let me know if this helps.
@@VirtualizationHowto > "Let me know if this helps." Sure it helps! At least now I know it is possible and I should dig deeper in order to do it. Thnks!
Hello, nice video, I am planning to play with pfSense also. Can you make a more in depth video about how to use pfSense to segment your vmware network ?
tech hype, I will have a video to follow. However, I have just uploaded a new post giving an overview of this process: www.virtualizationhowto.com/2022/03/segment-your-vmware-network-with-pfsense/
hi sir can you please make a tutorial about how we can use one machine to virtualiz pfsense and ubuntu server , and let the ubuntu server get an ip from pfsense and he can reach the internet if this senario is possible , thanks again .
Younes, thanks for the comment and question. Yes this is certainly possible. You will need to use some type of physical machine (workstation, server) and run a hypervisor, either Type 1 (VMware ESXi, Hyper-V, etc), or Type 2 (VMware Workstation, VirtualBox, etc). You would then create (2) VMs, one for pfSense and one Ubuntu. You could setup DHCP running on pfSense to hand out IPs on your virtual switch setup that your Ubuntu machine is connected to. Let me know if this makes sense. Do you have experience with virtualization and/or networking?
![[ ออกกอง ] วัยหนุ่ม 2544 โลกหลังลูกกรง..ทัวร์กองถ่ายหนังใน "คุกของจริง" | JUSTดูIT.](http://i.ytimg.com/vi/vB--aOkZCpw/mqdefault.jpg)
High quality demo! Great work!
Hello, I'm new in virtualization, do you have a video about those network adapters you showed at 5:35, I would be grateful for a help.
Wow, After watching this video you 100% motivated me to like the vid and subscribe to your channel. Thank you for such nice videos. 👍
Awesome! Thank you!
Hi, i'm abit aconfuse here, if i setup nested ESXI should I be install pfsense on the main vmhost rather than inside vcenter on the vitual host? i coun't figure it out how to setup vSwitch to test vlan etc...
How do I add the other VMs in my vSphere 7 lab to use the pfsense WAN I created?If you can do A video on that I would be greatful. Awesome Job!
@crvsys thank you for the comment! If you don't mind, create a topic on the forums and I can give more detailed help and answer questions there: www.virtualizationhowto.com/community
Thanks for the detailed video. Can you share the exact topology and details of th "Internet" port group please ?
Is there a video on how you setup the "Internet" Network adapter? Coming from Proxmox this confuses me..
Is there anyway to get this up and running without having to select the WAN/LAN right now? I'm running a Ubiquiti USG Pro-4 for a router/firewall. I would like to be able to setup pfSense first before removing the Pro-4.
This is great but I was hoping to see if it’s worth jumping through hoops and enabling SR-IOV on the nic with the wan port (or even LAN). Not sure if it makes any performance difference. I’m not experiencing any issues with my 300/30mbps cable connection.
Keith, if you are seeing good performance already probably not worth it, IMHO
@@VirtualizationHowto Thanks, yeah I test at my packaged rate and I did an iperf test from my hardwired pc to the pfsense vm (you can enable iperf server in pfsense gui) and got 940mbps over gigabit ethernet, which after overhead is pretty much expected. So seems ok for now!
Maybe in some intense 10gigabit networks it could make sense, but for the home user, I think were all good!
I've been racking brain over this for a couple of days now, I don't even know if I need pfsense for my problem. I'm running an esxi host on my home network. I have some virtual machines that need to communicate with the internet, and I have other virtual machines that I want to only communicate with physical machines on my LAN. I have one NIC on my system now (using an old desktop) and I'm pending a second NIC in the mail.
My thoughts are that I'll create two separate virtual switches, SW1 with NIC1 for Internet traffic and SW2 with NIC2 for LAN traffic. With this setup, both NICs will still be facing the internet via my router though, right? Should I use NAT on pfsense to route SW1 to the internet and route SW2 to my LAN?
If you could please share your thoughts, that would be greatly appreciated. Starting my home lab has proven to me that I don't know as much as I thought I did about networking/virtualization.
Thanks for the video.
Doubt: When and where did you mention the LAN IP address ?
Great work, thank you. Would like to ask your opinion on the security side of this, since the WAN port running on ESXi is exposed directly to the internet. have you had any security problems? Are you running this for production? I see some comments round the internet saying dont virtualise the firewall, but if you have not had any issues, i will probably take the plunge and start using a virtualised firewall. I am just concerned for the security side of it. TIA
Hi, Thank you for this video, were you able to install the VMware tools on this virtual machine ? and also is it possible to do the configurations which you have done over UI through commands or script ?
Is it possible to connect another vm with windows 10 for example to the router via LAN
Yolorub, many things are possible with creative routing. You can do all kinds of things to route traffic with pfSense and other routers in general
I have a few questions. I am using a simple ESXi install without VCenter. I have a mini-PC with 6 X 2.5Gbit ports. One port will be the WAN port. One will be for management, which leaves 4 ports left. How would you configure your VSwitches and port groups? I would like to emulate the bridging feature that bare metal PFSense has by ganging multiple ports as a switch with a shared IP address. Is this possible? I am also thinking about using one port as a backup subnet and maybe using one as a heartbeat network if I choose to make have this managed by a VCenter.
Rico, thanks for your comment. In vSphere portgroups this is easily accomplished. You create your vSwitches and assign the network adapters to them. So, if you want a WAN vSwitch backed by 2 adapters, you would create the vSwitch, tag your VLAN if using VLANs, and add the adapters. This would be the same process for your LAN ports. You would then just place your virtual machine connected to the appropriate vSwitches. Does this help?
@@VirtualizationHowto Right now, I am only using ESXi 7 without any VCenter.
I changed the NIC to E1000e, which helped. Two nodes attached to two NICs now are picking up an IP via DHCP. But I am still not able to connect to the pfsense GUI from the 2 nodes attached if both NICs are connected. What should be the teaming policy? Basically, I want this firewall to work within the virtual environment and outside it also.
Is it possible to route all the traffic of a host desktop to a pfSense guest VM ???
Andrew, yes this is definitely doable. It just involves creating the appropriate VLANs and network uplinks plumbed into the correct interfaces of your virtual pfSense router. The physical desktop doesn't know any difference between a virtual or physical router. Let me know if this helps.
@@VirtualizationHowto
> "Let me know if this helps."
Sure it helps! At least now I know it is possible and I should dig deeper in order to do it.
Thnks!
Hello, nice video, I am planning to play with pfSense also. Can you make a more in depth video about how to use pfSense to segment your vmware network ?
tech hype, I will have a video to follow. However, I have just uploaded a new post giving an overview of this process: www.virtualizationhowto.com/2022/03/segment-your-vmware-network-with-pfsense/
@@VirtualizationHowto great article, thanks. I will try something similar in my test lab.
You missed the most important part, the vSwitch and dpg config
doesnt pfsense use freebsd 12?
hi sir can you please make a tutorial about how we can use one machine to virtualiz pfsense and ubuntu server , and let the ubuntu server get an ip from pfsense and he can reach the internet if this senario is possible , thanks again .
and also if we can attach pihole as dns it will be awsome
Younes, thanks for the comment and question. Yes this is certainly possible. You will need to use some type of physical machine (workstation, server) and run a hypervisor, either Type 1 (VMware ESXi, Hyper-V, etc), or Type 2 (VMware Workstation, VirtualBox, etc). You would then create (2) VMs, one for pfSense and one Ubuntu. You could setup DHCP running on pfSense to hand out IPs on your virtual switch setup that your Ubuntu machine is connected to. Let me know if this makes sense. Do you have experience with virtualization and/or networking?
@@VirtualizationHowto thanks for your reply and making things more clear 🙏
where do i get this machine
You can download the pfSense community edition distro here: www.pfsense.org/download/
what is the ip address of pfSense?