From f9624cf14ac8eaa6672e189b95814766dc3a5d78 Mon Sep 17 00:00:00 2001 From: Gitea Actions Date: Fri, 10 Oct 2025 20:47:50 +0000 Subject: [PATCH] Auto-update blog content from Obsidian: 2025-10-10 20:47:50 --- ...gration-opnsense-proxmox-highly-available.md | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/content/post/13-migration-opnsense-proxmox-highly-available.md b/content/post/13-migration-opnsense-proxmox-highly-available.md index 3331524..9b25260 100644 --- a/content/post/13-migration-opnsense-proxmox-highly-available.md +++ b/content/post/13-migration-opnsense-proxmox-highly-available.md @@ -23,24 +23,33 @@ For the real thing, I'll have to connect the WAN, coming from my ISP box, to my ### UniFi -The first thing I do is to configure my layer 2 network which is managed by UniFi. +The first thing I do is to configure my layer 2 network which is managed by UniFi. There I need to create two VLANs: +- *WAN* (20): transport the WAN between my ISP box and my Proxmox nodes. +- *pfSync* (44), communication between my OPNsense nodes. In the UniFi controller, in `Settings` > `Networks`, I add a `New Virtual Network`. I name it `WAN` and give it the VLAN ID 20: ![unifi-add-vlan-for-wan.png](img/unifi-add-vlan-for-wan.png) +I do the same thing again for the `pfSync` VLAN with the VLAN ID 44. + I will plug my ISP box on the port 15 of my switch, which is disabled for now. I set it as active, set the native VLAN on the newly created one `WAN (20)` and disable trunking: ![unifi-enable-port-wan-vlan.png](img/unifi-enable-port-wan-vlan.png) -Once this setting applied, I make sure that only the ports where are connected my Proxmox nodes propagate this VLAN on their trunk. We are done with UniFi configuration. +Once this setting applied, I make sure that only the ports where are connected my Proxmox nodes propagate these VLAN on their trunk. + +We are done with UniFi configuration. ### Proxmox SDN Now that the VLAN can reach my nodes, I want to handle it in the Proxmox SDN. -In `Datacenter` > `SDN` > `VNets`, I create a new VNet, name it `vlan20` to follow my own naming convention, give it the `WAN` alias and use the tag (ID) 20: +In `Datacenter` > `SDN` > `VNets`, I create a new VNet, name it `vlan20` to follow my own naming convention, give it the *WAN* alias and use the tag (ID) 20: ![proxmox-sdn-new-vnet-wan.png](img/proxmox-sdn-new-vnet-wan.png) -Next I apply this configuration and we are done with the SDN. +I also create the `vlan44` for the *pfSync* VLAN, then I apply this configuration and we are done with the SDN. ## Create the VMs +Now that the VLAN configuration is done, I can start buiding my VMs. + +This time I already have the ISO uploaded \ No newline at end of file