F5F Stay Refreshed Power Users Networks I can assist with understanding your new layout. What specific challenges are you facing?

I can assist with understanding your new layout. What specific challenges are you facing?

I can assist with understanding your new layout. What specific challenges are you facing?

W
WasianNinja
Member
174
12-05-2023, 02:52 PM
#1
Hello! You’ve increased your setup from one server to two, adding complexity with different environments. For your needs—separating proxmox and Windows machines while keeping access controlled—consider virtualizing pfSense as the central router. This way you can manage traffic, enforce policies, and maintain connectivity between all devices. Let me know if you’d like more details on configuration steps!
W
WasianNinja
12-05-2023, 02:52 PM #1

Hello! You’ve increased your setup from one server to two, adding complexity with different environments. For your needs—separating proxmox and Windows machines while keeping access controlled—consider virtualizing pfSense as the central router. This way you can manage traffic, enforce policies, and maintain connectivity between all devices. Let me know if you’d like more details on configuration steps!

L
Lord_Foxtrot
Senior Member
408
12-06-2023, 03:08 PM
#2
This can be done using VLANs and sub-interfaces on the router. It would place both devices in separate subnets while still providing internet connectivity.
L
Lord_Foxtrot
12-06-2023, 03:08 PM #2

This can be done using VLANs and sub-interfaces on the router. It would place both devices in separate subnets while still providing internet connectivity.

M
miknes123
Senior Member
646
12-06-2023, 03:29 PM
#3
It seems you're looking for strong DMZ isolation. You might benefit from moving your existing Windows environment to a similar hypervisor like Proxmox, which can be highly available and flexible. pfSense can block incoming traffic to these DMZ zones while letting workstations reach out as needed.
M
miknes123
12-06-2023, 03:29 PM #3

It seems you're looking for strong DMZ isolation. You might benefit from moving your existing Windows environment to a similar hypervisor like Proxmox, which can be highly available and flexible. pfSense can block incoming traffic to these DMZ zones while letting workstations reach out as needed.

A
ApaGames_
Member
130
12-08-2023, 05:10 AM
#4
You can achieve this with pfSense alone. Virtualizing the box won’t cause issues if done correctly. The initial idea of using physical ports is solid, but connecting via switches offers better flexibility.
A
ApaGames_
12-08-2023, 05:10 AM #4

You can achieve this with pfSense alone. Virtualizing the box won’t cause issues if done correctly. The initial idea of using physical ports is solid, but connecting via switches offers better flexibility.

K
kolja1234
Junior Member
17
12-08-2023, 10:03 AM
#5
It can be handled with pfSense, but I don't suggest setting it up as a virtual machine. It will be essential for your internet connection. If you need to shut it down for maintenance, you'll lose the router entirely. This device is one of those network tools you really want to keep running directly on its own hardware.
K
kolja1234
12-08-2023, 10:03 AM #5

It can be handled with pfSense, but I don't suggest setting it up as a virtual machine. It will be essential for your internet connection. If you need to shut it down for maintenance, you'll lose the router entirely. This device is one of those network tools you really want to keep running directly on its own hardware.