Comment - FBXL Lotide

Comment on Setting Up OPNsense on Proxmox: Doubts regarding NIC setup

<- View Parent

xavier666@lemmy.umucat.day ⁨2⁩ ⁨days⁩ ago

So if you want to go that route I recommend you to use eth3 as dedicated port for proxmox.

I need a clarification here.

eth1 = WLAN. So it gets a public IP.
eth2 = LAN. So it will get a 192.168.1.1 IP (this is usually hard-coded during OPNsense setup)
eth3 = MGMT.
- If this is out-of-band, that is, it will work even when OPNsense VM is down, how will it get the IP?
- Should the IP for MGMT be hard-coded? Should it be in the same subnet or needs to be different?
- If I want to access via MGMT, what will the routing table of the device on the other end (the desktop from which I will access Proxmox via MGMT) look like?

If you have any resources regarding this setup, please share.

Thank you for your response.

original

Sort:hotnew top

chief@lemmy.zip ⁨2⁩ ⁨days⁩ ago
I think you have a typo here, eth1 is WAN not WLAN? you can configure eth3 to have a hardcoded ip. E.g. 192.168.1.2 - OPNsense must be aware that this ip has been assigned to a device so that the DHCP server doesn’t assign it to a different device. When the VM goes down you can still configure the network manually on your PC and access proxmox directly. Regarding routing tables, devices on the same subnet are routed directly, all other destinations usually go via the router. So 192.168.1.0/24 (Assuming /24 subnet) will work fine even if the router goes down as long as the connected device have a valid IP address in this segment. This is why the hardcoded ip will still work.

I use this setup myself, with the complication that I am using vlans. So for this to work I need to connect to the correct physical port on my switch, but you do not have this additional complexity.

I saw that you added the detail that you’re also running another vm - AFAIR you could route that via the management port as well with via proxmox without added complexity.

original
- xavier666@lemmy.umucat.day ⁨6⁩ ⁨hours⁩ ago
  
  I think you have a typo here, eth1 is WAN not WLAN
  
  Corrected!
  
  When the VM goes down you can still configure the network manually on your PC and access proxmox directly
  
  Yes, that’s why having this MGMT port is so important. Time to make some more cables :P
  
  This is why the hardcoded ip will still work.
  
  For some of the critical infra, I will probably hardcode the IP
  
  I saw that you added the detail that you’re also running another vm - AFAIR you could route that via the management port as well with via proxmox without added complexity.
  
  I’ve elaborated upon this in this comment in this thread. Please check and let me know your opinions.
  
  original