[SOLVED] OPNsense VM on Proxmox - what am I missing????

[handydutchguy]

Hello all,

My question is rooted in frustration with myself. Usually I find that if no one else has the same issue, it's ME that's doing something wrong... Still - I hope someone is willing to be kind enough to help me out.

I have had OPNsense on a dedicated box before and had it running just fine. VPN's, different subnets - the usual soho configuration. Now, I've decided to put a new install on a VM in Proxmox. The host box has 2 onboard Intel G-nics and I've put 3 more G-nics in. 2 of those also Intel and one Realtek.

OPNsense has - so far - two vmbr's: vmbr0 (management nic for Proxmox) as the LAN and vmbr1 for WAN.

With OPNsense turned off, my firewall/router is a Sonicwall TZ210 and everything works. If I configure OPNsense with the same IP addressing/gateway/DNS settings and disconnect the Sonicwall and test with OPNsense, I have a problem...

I can ping anything by fqdn or ip address from OPNsense VM, using the WAN as the source, but nothing else works.
Packet capturing shows me that packets from the LAN are leaving OPNsense, but simply trying to open a webpage eventually times out and tells me the website cannot be found.

AAAAARGH...!! I'm sure it's documented elsewhere but I've searched and I've searched, but I couldn't find (... Elvis, anyone?) the answer to the problem.

[camouflageX]

Hello,

can you post a packet capture file with a small description please?

Kind regards
Andreas

[handydutchguy]

Thanks. I will, but am off to work. Later this afternoon or early evening, GMT -06:00 I can do this.

[handydutchguy]

I looked at it some more later this evening and with a fresh eye. I honestly didn't do anything else than enter 8.8.8.8 in my main workstation into DNS field for testing, and that worked. Removed it and it still worked. Then added 2 more interfaces, 1 for WiFi and another for Guest Wifi, gave both DHCP to hand out, added any-any rules in the FW and all is well.

All in all I'm glad it's working as expected, but on the other hand I would love to know what was wrong initially. Oh well...

(How can I mark this as solved?)

[franco]

Hi handydutchguy,

Thanks for the follow up... glad it works as expected now.

Marking the topic solved is usually done by editing the first post subject, adding "[SOLVED]" in front of the subject so it can be seen on the forum view.


Cheers,
Franco