Overclock.net › Forums › Software, Programming and Coding › Networking & Security › pfSense Network Segments
New Posts  All Forums:Forum Nav:

pfSense Network Segments

post #1 of 6
Thread Starter 
I'm setting up a pfSense box in ESXi and i'm thinking of having:
LAN: 10.10.10.1
DMZ: 10.10.20.1
VM_LAN: 10.10.30.1
VM_DMZ: 10.10.40.1

this way i can have the VM's all communicating on their own segment, plus allowing me to monitor traffic to each segment independently.

Why would i not want to do this? I understand this will put more of a load on the router but im a small network and normally it's just me and the roommate. We both preform computer repair so we drag a few additional machines home but for the most part were under two dozen devices between the two of us for physical items.

Or if i were to not have VM_DMZ/VM_LAN i would team the nic's together fail over and balancing.


What do you all think?
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
post #2 of 6
Thread Starter 
bump
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
post #3 of 6
I don't see a problem with it as long as your pfsense build has the horsepower (which wouldn't be much with fewer than 24 devices). My setup is similar with a DMZ, LAN, and VM LAN. I don't have a need for a VM DMZ that I can think of really and I don't have another open NIC port.

With the failover though unless you have more than one physical machine I don't see the point. Now if you do have 2 physical machines or 2 VM's then yea it could be useful.
Red-Scout
(18 items)
 
Asus G53SX-TH71
(12 items)
 
Big Blue
(12 items)
 
CPUMotherboardGraphicsGraphics
AMD 8320 FX Asus Crosshair V Twin Frozr 6950 Twin Frozr 6950 
RAMHard DriveHard DriveHard Drive
Corsair Vengence Red Crucial M4 Western Digital Raptor 300gb Western Digital 1 TB Black 
Optical DriveCoolingOSMonitor
LG Blu-ray Corsair H80 Windows 7 Professional Asus VE248H x3 
KeyboardPowerCaseMouse
Logitech MX 5500 Revolution Black Thermaltake TR2 RX 750w CoolerMaster Storm Scout MX Revolution Cordless Laser Mouse 
AudioAudio
Logitech X-540 5.1 System Creative Sound Blaster X-Fi Titanium Fatal1ty 
CPUMotherboardGraphicsRAM
Intel Core i7 2670QM G53SX NVIDIA GeForce GTX 560M Samsung  
RAMRAMRAMHard Drive
Corsair  Samsung  Corsair  Corsair Force GT3 
Hard DriveOptical DriveOSMonitor
Hitachi Blu-Ray Drive Windows 7 Professional 15.4" 1080p 
CPUMotherboardGraphicsRAM
AMD FX 8120 Asus M5A99FX Pro R2.0 MSI Windforce 6850 Kingston Hyper-Blue 16Gb 
Hard DriveHard DriveHard DriveCooling
3x Seagate Barracuda 3Tb OCZ Agility 2 64Gb 3x OCZ Vertex 2 Plus 32 Gb Cooler Master Seidon 120mm 
OSOSPowerCase
Windows Server 2012 Standard VMs (Server 2012, Windows 7, Windows 8, Ubuntu,... PC Power and Cooling 500w Silencer NXZT Switch 810 
  hide details  
Reply
Red-Scout
(18 items)
 
Asus G53SX-TH71
(12 items)
 
Big Blue
(12 items)
 
CPUMotherboardGraphicsGraphics
AMD 8320 FX Asus Crosshair V Twin Frozr 6950 Twin Frozr 6950 
RAMHard DriveHard DriveHard Drive
Corsair Vengence Red Crucial M4 Western Digital Raptor 300gb Western Digital 1 TB Black 
Optical DriveCoolingOSMonitor
LG Blu-ray Corsair H80 Windows 7 Professional Asus VE248H x3 
KeyboardPowerCaseMouse
Logitech MX 5500 Revolution Black Thermaltake TR2 RX 750w CoolerMaster Storm Scout MX Revolution Cordless Laser Mouse 
AudioAudio
Logitech X-540 5.1 System Creative Sound Blaster X-Fi Titanium Fatal1ty 
CPUMotherboardGraphicsRAM
Intel Core i7 2670QM G53SX NVIDIA GeForce GTX 560M Samsung  
RAMRAMRAMHard Drive
Corsair  Samsung  Corsair  Corsair Force GT3 
Hard DriveOptical DriveOSMonitor
Hitachi Blu-Ray Drive Windows 7 Professional 15.4" 1080p 
CPUMotherboardGraphicsRAM
AMD FX 8120 Asus M5A99FX Pro R2.0 MSI Windforce 6850 Kingston Hyper-Blue 16Gb 
Hard DriveHard DriveHard DriveCooling
3x Seagate Barracuda 3Tb OCZ Agility 2 64Gb 3x OCZ Vertex 2 Plus 32 Gb Cooler Master Seidon 120mm 
OSOSPowerCase
Windows Server 2012 Standard VMs (Server 2012, Windows 7, Windows 8, Ubuntu,... PC Power and Cooling 500w Silencer NXZT Switch 810 
  hide details  
Reply
post #4 of 6
Thread Starter 
My pfSense box is a VM with two cores @ 2.38GHz (its a Intel Q9550 775 socket) with 2Gb Ram. All the VM stuff is running off the same host so I currently have 6 physical NICS, two onboard realtech are both bound for management. The other 4 I'm thinking of binding together in sets of two for fail over. Two NICS are on one card and then two single port NICS.

So i was thinking of binding them one single pore to one of the ports on the dual port nice. So if one fails I'm not dead in the water.

Sent from my MB855 using Tapatalk 2
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
post #5 of 6
Seems fine if your are running other VM's maybe more ram maybe required.

Other than that seems like a perfectly fine plan.
ESXi Home Box
(6 items)
 
The Workstation.
(16 items)
 
 
CPURAMHard DriveOS
Dual L5630 72GB DDR3 RECC 120GB VERTEX 4 + 6TB RAID5 ESXi 6.0 U2 
Other
Dell PowedgeR710  
CPUGraphicsRAMHard Drive
Intel Core i5 2.4GHZ Intel Iris Pro 16GB DDR3 256GB PCI-e x2 
OSKeyboardMouse
OSX 10.11 + Win 10 Apple Wireless Keyboard Apple Magic Trackpad 
  hide details  
Reply
ESXi Home Box
(6 items)
 
The Workstation.
(16 items)
 
 
CPURAMHard DriveOS
Dual L5630 72GB DDR3 RECC 120GB VERTEX 4 + 6TB RAID5 ESXi 6.0 U2 
Other
Dell PowedgeR710  
CPUGraphicsRAMHard Drive
Intel Core i5 2.4GHZ Intel Iris Pro 16GB DDR3 256GB PCI-e x2 
OSKeyboardMouse
OSX 10.11 + Win 10 Apple Wireless Keyboard Apple Magic Trackpad 
  hide details  
Reply
post #6 of 6
Thread Starter 
Quote:
Originally Posted by linkinparkfan007 View Post

Seems fine if your are running other VM's maybe more ram maybe required.

Other than that seems like a perfectly fine plan.

My ESXi host currently has 8GB of ram, I'll soon be getting a Dell C1100 and i'll pack that girl up with ram. My goal is to be able to give the pfSense Box about 12GB of ram for Snort, AV, and Squid Caching, before dumping to a dedicated 1TB Harddrive for long term cache such as windows updates, and the such
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
 
MacBook Pro 6.1
(16 items)
 
Server
(19 items)
 
CPUMotherboardGraphicsRAM
Core i7 Q720 Asus ATI Mobility Radeon HD 5870 1GB DDR5 12 GB DDR3 
Hard DriveOSMonitorKeyboard
Seagate Momentus XT 500GB 7200RPM & Seagate 750... Windows 7 Ultimate x64 17.3" LED LCD Factory 
PowerCaseMouseMouse Pad
Factory Factory Logitech G9X Mine 
CPUMotherboardGraphicsGraphics
Intel Core i5 MacBook Pro 6.1 17" Intel HD Graphics NVIDIA GeForce GT 330M 
RAMHard DriveOptical DriveCooling
4 GB DDR3 1067 MHz Hitachi HTS545050B9SA02 HL-DT-ST DVDRW GS23N Factory 
OSMonitorKeyboardPower
Mac OS X 10.6.8 17" LED Factory Factory 
CaseMouseMouse PadAudio
Factory Factory None Factory 
CPUMotherboardGraphicsRAM
Intel Core 2 Quad Q9550 Abit IP35 Pro PNY VCQ290NVS-PCIEX16-PB Quadro NVS 290 256MB 64-b G.Skill F2-8000CL5D-4GBPQ 
Hard DriveHard DriveHard DriveHard Drive
Dell Perc5/i Samsung HD204UI Seagate Constellation ES SAS Drive Model: ST310... Hitachi Deskstar 
Hard DriveHard DriveOptical DriveCooling
Western Digital WD1002FAEX Black Western Digital Black 2 x ASUS DRW-2014L1T Corsair H50 
OSMonitorKeyboardPower
Windows Server 2008 R2 Standard x64 ASUS VK222U Black 22" 2ms Logitech G15 (Original) - U.S. Dvorak Layout Enermax INFINITI EIN720AWT 720w 
CaseMouseMouse Pad
LIAN LI V SERIES PC-V2100A Silver Aluminum ATX ... Logitech G9x Steven's Computer Service 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › pfSense Network Segments