OpnSense - WAN VLAN

[leprejohn]

Hello opnsense forum. how are you all doing? I've been trying to get PFSense working with my draytek 130 modem (ISP is Sky UK).

I was pointed towards the direction of opnsense, which I've got to say looks pretty good so I've decided to give it a try, I've managed to get it working on bare metal with using the sky username and password, using a 4 port NIC.

However as I want to install the VM on my proxmox server, as then I could fail it over to a different host if I'm taking down a server which is something I would love to do.

However when I tag the VLAN on WAN port with only 1 NIC, even with the 4 port NIC I still was unable to get an external IP. So I was hoping to reach out and get some advice.

Thanks, LepreJohn

[liceo]

Hm, not sure if i understand your request. Some questions/assumptions...:

• You have an opnsense instance which is set up on bare metal, right?
• Do you have a direct physical connection between Draytec Router and the opnsense box or is it connected via a switch?
• Your problem is not related to the proxmox or high availability setup you have mentioned, right?

[bunchofreeds]

A couple more questions:

Are you using Linux Bridges for your Proxmox Switches
If so, are they VLAN aware
Have you tried tagging your preferred VLAN to the Proxmox nic hardware associated to the guest. Do not setup a VLAN on that interface within the guest unless you are trunking VLANS's

Have a read of this
https://pve.proxmox.com/wiki/Network_Configuration#_vlan_802_1q

[leprejohn]

Hi, I just thought to update the thread, I could not figure out what was wrong, as the opnsense VM was able to get an DCHP IP on the vlan when my ISP router was connected, once I flipped to the pass-through modem I could not get an IP address.

I tried with both ESXI and Hyper-V with the same setup WAN adapter setup with the tagged VLAN, both worked when I changed the ISP router to the modem and was able to get an external IP.

So I've decided to go back to hyper-v instead of proxmox as this setup is working

Thanks, LepreJohn