OPNsense Forum

English Forums => General Discussion => Topic started by: moalboal on July 04, 2020, 08:54:00 am

Title: [SOLVED] Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 04, 2020, 08:54:00 am

Hi all,

I want to add a new interface to my VM firewall running on ESXi 7. After adding the NIC in ESXi and restarting the box, the new NIC is not seen by OpnSense. The NIC is detected in dmseg but not configured.

User-Agent Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
FreeBSD 11.2-RELEASE-p20-HBSD  07ef86ce9ca(stable/20.1) amd64
OPNsense 20.1.8 cded2b34a
Plugins os-acme-client-1.34 os-dyndns-1.21 os-vmware-1.5
Time Sat, 04 Jul 2020 14:15:40 +0800
LibreSSL 3.0.2
PHP 7.3.19

Some of dmesg output:

vmx0:  port 0x5000-0x500f mem 0xfd3fc000-0xfd3fcfff,0xfd3fd000-0xfd3fdfff,0xfd3fe000-0xfd3fffff irq 19 at device 0.0 on pci4
vmx0: Ethernet address: 00:0c:29:e3:df:1a

<snipped>

vmx1:  port 0x6000-0x600f mem 0xfd2fc000-0xfd2fcfff,0xfd2fd000-0xfd2fdfff,0xfd2fe000-0xfd2fffff irq 16 at device 0.0 on pci5
vmx1: Ethernet address: 00:0c:29:e3:df:24

<snipped>

vmx0: link state changed to UP
vmx1: link state changed to UP
tun1: changing name to 'ovpns1'
tun2: changing name to 'ovpnc2'
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
pflog0: promiscuous mode enabled
pcib27: Attention Button Pressed: Detaching in 5 seconds
pci6:  on pcib27
vmx2:  at device 0.0 on pci6
vmx2: Ethernet address: 00:0c:29:e3:df:2e
vmx2: detached

New NIC is not being configured when the first two NIC's are. I guess the giveaway is:

vmx2: detached

Has anyone any advice to checking this? The full dmesg.boot output from the issue reporter and a screenshot of the NIC config on ESXi are attached.

Thanks,

Simon.

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: Supermule on July 04, 2020, 11:50:31 am

Have you added a new interface from the console??

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 04, 2020, 12:31:44 pm

I tried from the GUI but could not see the mac address. I added an ovpns1 interface anyway with 00:00:00:00:00:00:00 address, saved it but still under Assignments could not see the vmx2 nic to correct the assignment. Likewise on the console only vmx0 & vmx1 are listed under the assign interfaces option.

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 04, 2020, 01:12:04 pm

Sorry, I should also have made clear that I have vmx0 and vmx1 assigned and working. The missing NIC is vmx2.

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: Supermule on July 04, 2020, 02:39:26 pm

Can you pls. try from the console in ESXi??

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 04, 2020, 03:25:59 pm

I don't believe that it's possible to add a NIC to a VM using esxcli, it has to be done from the ESX management interface. I've done this already, see screenshot on my original post.

If you mean from the assign interfaces option in the opnsense console, this is what I see there:

Code: [Select]

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 1


Valid interfaces are:
vmx0             00:0c:29:e3:df:1a VMware VMXNET3 Ethernet Adapter
vmx1             00:0c:29:e3:df:24 VMware VMXNET3 Ethernet Adapter
ovpns1           00:00:00:00:00:00
ovpnc2           00:00:00:00:00:00

No sign of a vmx2 interface.

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: Supermule on July 04, 2020, 04:59:32 pm

Does it show as connected in ESXi??

Title: Re: Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 05, 2020, 02:42:05 am

Yes, see screenshot in my original post.

Title: Re: [SOLVED] Additional NIC in ESXi not seen in OpnSense VM
Post by: moalboal on July 05, 2020, 03:35:27 am

I decided to strip out the old config in ESX and start again. For whatever reason on restarting the firewall VM the additional NIC is now seen correctly and I can configure it.

My apologies for the noise. Thanks for the contributions, and have a good weekend!

Simon.