Replacing OVHgateway

Create a virtual machine with these settings:

• Name: GW-PFSENSE

• vCPU(s): 2

• Number Of Cores Per vCPU: 1

• Memory: 4 GB

• Boot Configuration: Legacy BIOS

• Disk (1)

  • Type: CD-ROM
  • Operation: Clone from image
    • Image: Your pfSense ISO file
  • Bus Type: SATA

• Disk (2)

  • Type: DISK
  • Operation: Allocate on Storage Container
  • Bus Type: SCSI
  • Storage Container: Select an Object Storage container with at least 100 GB of storage space.

• Network: two network cards

  • VLAN 0 (base)
  • VLAN 1 (infra)

You can use our guide on virtual machine management to create this virtual machine.

In Prism Central, navigate to Infrastructure > Compute > VMs.

Click on the OVHgateway virtual machine.

From the Power Operations menu, select Guest Shutdown.

Go back to virtual machine management in Prism Central and click on GW-PFSENSE.

From the Power Operations menu, select Power On.

Once the VM is powered on, click Launch Console.

Accept the license information

Review the pfSense license information and press the Enter key to accept it.

Welcome

Choose Install, switch to OK with the Tab key, and press Enter.

Network Installation

Choose OK by pressing Enter.

WAN Interface Assignment and Configuration

Leave vtnet0 selected, and press OK.

WAN (vtnet0) Network Mode Setup

Change the Interface Mode to Static by pressing OK.

Modify the following areas with the correct configuration settings:

Choose Continue and select OK.

LAN Interface Assignment and Configuration

Choose vtnet1 and select OK.

Choose Continue and select OK.

Leave LAN selected, and press Continue.

A connectivity check will run.

Final installation steps

Choose Install CE.

Choose Continue and select OK.

Choose stripe and select OK.

Select NUTANIX VDISK and press OK.

Confirm by pressing Yes.

Select a version to install and press OK.

When the installation has finished, press OK.

Select Reboot.

From Prism Central, go back to the GW-PFSENSE virtual machine management interface.

Click the Power Operations menu and select Guest Shutdown.

Then, click the Update menu and select Storage.

Select the CD-ROM disk, click the Actions menu, and select Eject.

Return to the Power Operations menu and select Power On.

Click Launch Console to continue the installation after startup.

From the System menu, choose User Manager.

Click the Pen icon on the right-hand side.

On the following screen, choose a new password, retype it to confirm, then scroll to the bottom of the page and click Save.

Go to the Firewall menu and choose Rules.

Check that you are on the WAN tab, then click the ⬆️ Add button (at the bottom) to create a firewall rule.

Set these options:

• Edit Firewall Rule

  • Action: Pass
  • Interface: WAN
  • Address Family: IPv4
  • Protocol: TCP

• Source

  • Select Address or alias from the drop-down menu.
  • Enter the public address that can connect to the pfSense firewall.

• Destination

  • Destination: WAN address
  • Destination Port Range From: HTTPS
  • Destination Port Range To: HTTPS

Click Save at the bottom of the page.

Once you have returned to the rules list, click Apply Changes to activate the rule.

The pfSense administration interface is then accessible from the Internet, only from the authorized network in HTTPS, here https://198.51.100.1.

Log in to Prism Central to make these changes:

Use the Isolating management machines from production guide to create a new VLAN on your Nutanix cluster with these settings:

• VLAN name: Production
• VLAN number: 2

Your new network must appear in Subnets.

Now that the new subnet has been created, we will add an adapter to the configuration of your GW-PFSENSE virtual machine.

Via the virtual machine management, click on your GW-PFSENSE virtual machine, go to the Update menu, and choose Network.

On the next page, click + Attach to Subnet.

Choose the Production subnet and click Save.

Log in to the pfSense interface in https, with the public address (for example, https://198.51.100.1) in your pfSense administration interface, and follow these instructions:

Go to the Interfaces menu and click Assignments.

Click + Add to the right of Available network ports.

Select the vtnet2 interface and click Save.

In the Interfaces menu, click OPT1.

Check Enable Interfaces and modify these settings :

• Description: VLAN2
• IPv4 Address: 192.168.2.254/24

Click Save.

Click Apply Changes.

Go to the Firewall menu and click Rules.

Go to the VLAN2 tab and click the ⬆️ Add button on the left.

Change these values:

• Protocol: Any
• Source : VLAN2 subnet
• Destination: Any

Click Save.

Click Apply Changes.

Your VLAN 2 is now connected to the Internet!