Messages

1

General Discussion / Re: Really new to opnsense, need help configure internet passthrough or bridge!

« on: April 30, 2024, 01:56:06 am »

  :'( I know this might be very basic stuff, but im surprised no one has any advise or suggestions for me to try  :'( :'(

2

General Discussion / Really new to opnsense, need help configure internet passthrough or bridge!

« on: April 27, 2024, 11:16:46 pm »

Hello everyone. I am pretty new here as well as to opnsense, I have been pulling my hair out trying to figure out this particular issue on my own. So any help is greatly appreciated!

TLDR; I have a PC with a single cable connection to my Dell server which will act as a switch / router while providing access to esxi, nas, and internet access for my PC all from one single 10Gb rj45. Then the Server connects to Router client port(to redirect internet to PC). PC -->rj45 --> Server --> Router lan port. best way for me is sr-iov but it's not working but physical passthrough works.

Long version: I have a R730xd server running esxi with 4 port NIC(#1 1g #2 1g #1 10g #2 10g). I'd like to use #1 10G port - connect to the router's client port to receive internet. Then, I'd like to use #2 10G port, create sr-iov, assign opnsense with both #1 and #2 10G's sr-iov, potentially create a transparent bridge and redirect #1 10G port internet to the #2 physical 10G port where my PC is physically connected; I tried to install opnsense in a esxi as VM, passed in #1 10G physical, #2 10G phsyical, created a transparent bridge following official guide as well as dave's garages guide(also tried turning off all firewalls for testing purpose), it works without a problem; HOWEVER, i must use sr-iov for my #2 10G nic which is connected to my PC. When I change #2 10G to #2 10G sr-iov, i no longer get internet access, bridge still gets DHCP, but seems like it's unable to pass the internet to the #2 sr-iov. I tried to debug by turning on sr-iov on #1 10G(connected to internet), and turning off sr-iov #2 10G(connected to my PC), in this configuration, I am able to get DHCP ip address for my sr-iov #1(WAN can get DHCP), but that #1 sr-iov even being bridged, is unable to offer the IP , DHCP or internet flow to the bridge(bridge can't get DHCP). This makes me feel like there is some firewall / barrier blocking sr-iov specifically. In opnsense, firewall is turned off, and verified barebone physical #1 and #2 works, only sr-iov behaves in a isolated manner. Also from my understand sr-iov does not go through Esxi's vswitch, it act more less like actual physical connection, lastly, for sr-iov in opnsense, I passed through them in as PCIE device.

Also, I have also tried creating 2 vswitch , portgroup in esxi and pass the virtual esxi NIC to opnsense to achieve the same thing. It only works if I enable Promiscuous mode and fordged transmition in both vswitch; however this seems to cause huge issue with overall internet stability, even I get internet passthrough to my PC now via server, my router would constantly stop working and the entire internet will be down constantly(probably due to strange loopback or conflict due to how i set the vswitches) which is why i decided to just use physical or virtual function sr-iov to achieve what i want. Thanks again!
so If anyone has and advise or help. That would be great!