Configuring XCP-NG VLANs using pfsense, UniFi, & MikroTik Switches

No video

Configuring XCP-NG VLANs using pfsense, UniFi, & MikroTik Switches

Рет қаралды 15,244

Lawrence Systems

Күн бұрын

Пікірлер: 24

@bradleystannard3492 4 жыл бұрын

The most specific video ever, but precisely the one I needed as I was having vlan issues. Amazing video as always!

@dreagnore 4 жыл бұрын

Glad to hear you are warming up to Mikrotik, it is a great brand to get into with a steep learning curve but probably as good as pfsense just a lot cheaper.

@AlexanderHansen1 4 жыл бұрын

Would really love if you had some reviews of Palo Alto, Fortinet or Cisco gear on your show. That’s what our customers use.

@maxali6591 4 жыл бұрын

Il love so much opensource technos 😉. It works so well. It worses it a lot

@DaveLucre 4 жыл бұрын

Not sure if it's the same with XCP-NG, but with ESXI there's a limitation to the number of NICs you can assign to a VM, I hit that limit and needed to trunk all VLANs in via a virtual NIC. In ESXi you need to set VLAN ID 4095 for the Port Group in order to trunk ALL VLANs through to your pfSense VM's network adapter, from there you can then define all the VLANs you need inside pfSense against that NIC.

@throttlebottle5906 4 жыл бұрын

the limit is like 7 on single vm on citrix, so it's probably limited also.

@MrFunchess1639 4 жыл бұрын

Mr. Lawrence thank you for another excellent video. One question, is there any way to connect an monitor an UPS to the XCP-NG server so that the server could gracefully shutdown the VM's?

@HijmenSchilperoort 4 жыл бұрын

where/how do you handle the routing between vlans if you do not define them in pfsense? or do you not have the traffic leave those vlans?

@CoreI51001 4 жыл бұрын

Hey Tom, I have a question regarding DNS names and HTTPS certs. I see a subdomain instead of the IP addres in the address bar on both the UniFi controller and Xen Orchestra. Did you do that by entering a subdomain in the control panel of your domain registrar for both and pointing them to your external IP. To then port forward the subdomains from Xen and UniFI to their internal IP addresses. Than with the HTTPS certs, do you have a wildcard on your lawrencesystem.com domain which will apply the HTTPS cert on all domains inside lawrencesystem.com? Thanks in advance for your time.

@jmccoy555 4 жыл бұрын

Can you get 10g throughput on pfSense / FreeBSD on XCY-ng? Mine tops out around 2.5g out, in is full 10g, with iperf..... no issues with Linux, so have had to passthrough a nic to get around the issue which is a bit limiting. Any tips??

@Phil-D83 4 жыл бұрын

Can u do a video on setting up squid and squid guard in pfsense? Is there a free non self signed certificate we can use?

@LAWRENCESYSTEMS 4 жыл бұрын

kzfaq.info/get/bejne/erR3lK2BspfdmoU.html

@tomRX4878 4 жыл бұрын

Ok I get it with xcp-ng and virtual pfsense. But on the physical pfsense you have VLANs defined, right? Or better question: When I have a physical pfsense with only one WAN and one LAN then I must define VLANS in pfsense, correct?

@KuroganeX3 3 жыл бұрын

Hello, I watched video 2 times whole and he mentioned there that he doesnt propagate any VLANS on his main pfsense. he has set DHCP and he runs it "allVLANS" on port. as he does not want Pfsense to handle VLANS 3:40 min.

@LinuxRacr 3 жыл бұрын

My question is can your physical pfSense router give dhcp leases to virtual machines on your XCP-NG hypervisor that are not on the native VLAN? I've been having trouble with that.

@LAWRENCESYSTEMS 3 жыл бұрын

Yes, it does work

@LinuxRacr 3 жыл бұрын

@@LAWRENCESYSTEMS Not sure why not for me. I have the port going into my XCP-NG server having all VLANS. The native VLAN (1) DHCP from my physical pfSense gives IP's to machines that are on the XCP-NG no problem. I even have a virtual instance of pfSense that sucessfully sees the unmanged VLANS I've configured as virtual interfaces, and that works just fine. When I create a network in my pools configuration with a VLAN managed my my physical pfSense machine, and then create an interface on my virtual machine from that network/vlan, the DHCP IP is not given to the virtual machine, even after reboot. Yes, DHCP does work from said VLAN to other infrastructure. Not sure why this is the case.

@LinuxRacr 3 жыл бұрын

So I found my issue. I had two ports in my switch that were mislabled. I traced them down to find that I had given my trunk to the wrong port. It works like a charm now.