Help installing vm router OPNsense on KVM

[eiger3790]

Having some trouble pinging the VM guest OPNsense from the host VMM.
Here's my diagram/topology of the setup:
Host machine runs Ubuntu 22.04 Desktop and Virtual Machine Manager 4.0.0.
ISP router is bridged and Internet traffic is via NIC0 to the host machine.
2 physical NICs:
NIC0=WAN=enp3s0=a8:a1:59:6e:1f:8b=br0=0a:d4:78:1f:cd:41=vtnet0=52:54:00:c9:2f:af.
NIC1=LAN=enp2s0=1c:61:b4:6d:3B:4f=br1=d2:da:46:a2:b2:3e=vtnet1=52:54:00:ad:30:31.
I setup bridges, which show connected:

Code: [Select]

ubuntu@ubuntu:/etc/netplan$ brctl show
bridge name bridge id STP enabled interfaces
br0 8000.0ad4781fcd41 yes enp3s0
vnet0
br1 8000.d2da46a2b23e yes enp2s0
virbr0 8000.52540088b4b4 yes
ubuntu@ubuntu:/etc/netplan$ bridge link show
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br1 state listening priority 32 cost 100
3: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding priority 32 cost 100
8: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding priority 32 cost 100
ubuntu@ubuntu:/etc/netplan$ nmcli conn show --active
NAME            UUID                                  TYPE      DEVICE
netplan-br1     2f1c114b-0956-3743-a28b-800770c11963  bridge    br1   
netplan-br0     00679506-5c05-3c3d-bdfe-474849762078  bridge    br0   
virbr0          5cfb435c-dc5a-4741-8538-1664c7cb3693  bridge    virbr0
vnet0           bd70d929-245f-4f7c-a870-3ebd51dfc6a5  tun       vnet0 
netplan-enp2s0  7ea6f90b-3495-3533-948a-ef0035687c34  ethernet  enp2s0
netplan-enp3s0  6effa1b1-280b-3785-9b52-c723b445fb3e  ethernet  enp3s0 I edited the host Ubuntu's Network Manager so the host's LAN will ping the guest OPNsense router:

Code: [Select]

ubuntu@ubuntu:/etc/netplan$ cat 01-network-manager-all.yaml
# Let NetworkManager manage all devices on this system
network:
  version: 2
  renderer: NetworkManager
  ethernets:
    enp2s0:
      dhcp4: no
      addresses: [192.168.1.120/24]
      gateway4: 192.168.1.1
      nameservers:
        addresses: [8.8.8.8,8.8.8.4]
    enp3s0:
      dhcp4: no
  bridges:
    br0:
      dhcp4: yes
      interfaces:
        - enp3s0
    br1:
      dhcp4: yes
      interfaces:
        - enp2s0
Host connections show no IP address 192.168.1.120?

Code: [Select]

ubuntu@ubuntu:/etc/netplan$ ip -c a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 1c:61:b4:6d:38:4f brd ff:ff:ff:ff:ff:ff
    inet6 fe80::31ca:9227:dcb3:d09e/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br0 state UP group default qlen 1000
    link/ether a8:a1:59:6e:1f:8b brd ff:ff:ff:ff:ff:ff
4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:88:b4:b4 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
5: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 0a:d4:78:1f:cd:41 brd ff:ff:ff:ff:ff:ff
    inet 100.76.25.213/10 brd 100.127.255.255 scope global dynamic noprefixroute br0
       valid_lft 217sec preferred_lft 217sec
    inet6 2406:2d40:4100:8fb2:c261:34a2:7275:ff6e/64 scope global temporary dynamic
       valid_lft 201sec preferred_lft 51sec
    inet6 2406:2d40:4100:8fb2:8d4:78ff:fe1f:cd41/64 scope global dynamic mngtmpaddr
       valid_lft 201sec preferred_lft 51sec
    inet6 fe80::8d4:78ff:fe1f:cd41/64 scope link
       valid_lft forever preferred_lft forever
8: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br0 state UNKNOWN group default qlen 1000
    link/ether fe:54:00:c9:2f:af brd ff:ff:ff:ff:ff:ff
    inet6 fe80::fc54:ff:fec9:2faf/64 scope link
       valid_lft forever preferred_lft forever
9: vnet1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000
    link/ether fe:54:00:ad:30:31 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::fc54:ff:fead:3031/64 scope link
       valid_lft forever preferred_lft forever
499: br1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether d2:da:46:a2:b2:3e brd ff:ff:ff:ff:ff:ff


[bigverm23]

did you ever solve this? I'm in the same boat

[eiger3790]

Yes.
A totally different process from using TUI, which is unnecessary and over complicates configuration.
I solved the setup by using Ubuntu's GUI to add appropriate bridges.