PfSense Router Inside Network.

[Trouble Kelp]

I am trying to set up a pfSense router to use as a separate network from my main network but I am having some problems. I have set up an configured the pfSense router and have it up and running but I can’t seem to get the internet working on it. It is running on a VM in ESXi 6.7 and I have a virtual switch set up that takes in the internet from my ISP’s router into the pfsense VM as the WAN connection. Then another virtual switch going from the pfSense VM LAN into the other VMs.
PfSense was getting an IPv6 and IPv4 address but I couldn’t connect to the internet from it. Then I tried putting it in the DMZ of my ISP’s router nothing really changed. When I set up the pfSense box I unchecked the “Block RFC1918 Private Networks” and “Block bogon networks.”
My ISP requires the router WAN be set up with VLAN Tag 2 and VLAN priority as 3 so I also tried setting that up while the pfSense box is in the DMZ but with this configuration pfSense doesn’t get any IP addresses.
What is the best way to go about this? Should I keep the pfSense box in the DMZ or not? Am I doing something wrong?

[2FA]

Use an IP from your LAN as the pfSense external/WAN connection, no need to put it in your DMZ. Make sure that not only does the pfSense have routes set up to the ISP router, but also that the ISP router has routes set up returning to the pfSense router. I suspect that is where the connection issue lies.

[Trouble Kelp]

44 minutes ago, 2FA said:

Use an IP from your LAN as the pfSense external/WAN connection, no need to put it in your DMZ. Make sure that not only does the pfSense have routes set up to the ISP router, but also that the ISP router has routes set up returning to the pfSense router. I suspect that is where the connection issue lies.

How would I start to set that up? Would that be in Systems > Routing? It shows the ISP router's IP in as the WAN_DHCP Gateway but I'm not sure if that's the right thing. Or is it firewall rules? I'm not sure if that is the right thing. My ISP's router only has a couple options. You can set do port forwarding or DMZ and that's about it.

[2FA]

1 hour ago, Trouble Kelp said:

How would I start to set that up? Would that be in Systems > Routing? It shows the ISP router's IP in as the WAN_DHCP Gateway but I'm not sure if that's the right thing. Or is it firewall rules? I'm not sure if that is the right thing. My ISP's router only has a couple options. You can set do port forwarding or DMZ and that's about it.

https://docs.netgate.com/pfsense/en/latest/book/routing/static-routes.html

 

You'll need a router that set up a route to the pfSense router.

[Acedia]

Try enabling NAT on the pfSense box for LAN to WAN https://blog.monstermuffin.org/pfsense-guide-nat-firewall-rules-networking-101/

[Trouble Kelp]

23 hours ago, 2FA said:

https://docs.netgate.com/pfsense/en/latest/book/routing/static-routes.html

 

You'll need a router that set up a route to the pfSense router.

Thanks for the reply! Looks like it was actually the network settings for the VM I was connecting to the pfSense box was trying to access the ISP router instead of pfSense.