<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>
	Comments on: Custom pfSense on Azure Rm &#124; a complete guide	</title>
	<atom:link href="https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/</link>
	<description>Remarks from a Cloud Architect encounters</description>
	<lastBuildDate>Sat, 20 Jan 2024 13:14:32 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.1</generator>
	<item>
		<title>
		By: Javier		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-20594</link>

		<dc:creator><![CDATA[Javier]]></dc:creator>
		<pubDate>Sat, 20 Jan 2024 13:14:32 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-20594</guid>

					<description><![CDATA[Hi and thank you. Is necesary create in the NSG of Wan interfaces rule custom *]]></description>
			<content:encoded><![CDATA[<p>Hi and thank you. Is necesary create in the NSG of Wan interfaces rule custom *</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Pantelis Apostolidis		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3718</link>

		<dc:creator><![CDATA[Pantelis Apostolidis]]></dc:creator>
		<pubDate>Mon, 07 Jun 2021 06:45:01 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-3718</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3678&quot;&gt;Chandra&lt;/a&gt;.

Hi Chandra ,

When I created this post, only the AzureRm was available. The Az module didn&#039;t exist. 
You need to translate all the commands to Az. The Set-AZVMOSDISK is described here: https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmosdisk?view=azps-6.0.0

When I will find some time I will update the guide.]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3678">Chandra</a>.</p>
<p>Hi Chandra ,</p>
<p>When I created this post, only the AzureRm was available. The Az module didn&#8217;t exist.<br />
You need to translate all the commands to Az. The Set-AZVMOSDISK is described here: <a href="https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmosdisk?view=azps-6.0.0" rel="nofollow ugc">https://docs.microsoft.com/en-us/powershell/module/az.compute/set-azvmosdisk?view=azps-6.0.0</a></p>
<p>When I will find some time I will update the guide.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Chandra		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3678</link>

		<dc:creator><![CDATA[Chandra]]></dc:creator>
		<pubDate>Wed, 02 Jun 2021 10:09:44 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-3678</guid>

					<description><![CDATA[$VM &#124; Set-AzureRmVMOSDisk `
            -VhdUri https://********.blob.core.windows.net/vhds/pfsensefix.vhd `
            -Name pfsenseos -CreateOption attach -Linux -Caching ReadWrite

Is this script is correct. I am getting the below error

Set-AzVMOSDisk: Parameter set cannot be resolved using the specified named parameters. One or more parameters issued cannot be used together or an insufficient number of parameters were provided

Can you help me out to fix this]]></description>
			<content:encoded><![CDATA[<p>$VM | Set-AzureRmVMOSDisk `<br />
            -VhdUri <a href="https://********.blob.core.windows.net/vhds/pfsensefix.vhd" rel="nofollow ugc">https://********.blob.core.windows.net/vhds/pfsensefix.vhd</a> `<br />
            -Name pfsenseos -CreateOption attach -Linux -Caching ReadWrite</p>
<p>Is this script is correct. I am getting the below error</p>
<p>Set-AzVMOSDisk: Parameter set cannot be resolved using the specified named parameters. One or more parameters issued cannot be used together or an insufficient number of parameters were provided</p>
<p>Can you help me out to fix this</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Jeegar		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3657</link>

		<dc:creator><![CDATA[Jeegar]]></dc:creator>
		<pubDate>Mon, 31 May 2021 14:51:01 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-3657</guid>

					<description><![CDATA[How would it work in case of a IPsec tunnel..
and vm is still in 10.1.2.0/24

it would be kind of assymetric routing]]></description>
			<content:encoded><![CDATA[<p>How would it work in case of a IPsec tunnel..<br />
and vm is still in 10.1.2.0/24</p>
<p>it would be kind of assymetric routing</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Jeegar		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-3600</link>

		<dc:creator><![CDATA[Jeegar]]></dc:creator>
		<pubDate>Tue, 25 May 2021 19:03:48 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-3600</guid>

					<description><![CDATA[Use Case of Production Scenario.
Vnet - 10.20.0.0/16
Wan - 10.20.131.0/24 ----- Wan Interface - 10.20.131.4/32  Gtw ----- 10.20.131.1
Lan - 10.20.132.0/24  ----- Lan Interface 10.20.132.4/32     Gtw ----- 10.20.131.2
VM&#039;s in multiple subnets in vnet 10.20.0.0/16
OpenVpn Setup for remote users to access VM&#039;s of multiple subnet

Please help on Lan to Wan routing on Pfsense and Azure portal both
and Wan to Lan routing on Pfsense and azure portal both
Is IP forwarding still required on Lan Ip configuration required to be done

Your insights will be really helpful and i have a lab ready also if you want to work together on this scenario on Azure.
Looking forward to hear from you.
Regards,
Jeegar]]></description>
			<content:encoded><![CDATA[<p>Use Case of Production Scenario.<br />
Vnet &#8211; 10.20.0.0/16<br />
Wan &#8211; 10.20.131.0/24 &#8212;&#8211; Wan Interface &#8211; 10.20.131.4/32  Gtw &#8212;&#8211; 10.20.131.1<br />
Lan &#8211; 10.20.132.0/24  &#8212;&#8211; Lan Interface 10.20.132.4/32     Gtw &#8212;&#8211; 10.20.131.2<br />
VM&#8217;s in multiple subnets in vnet 10.20.0.0/16<br />
OpenVpn Setup for remote users to access VM&#8217;s of multiple subnet</p>
<p>Please help on Lan to Wan routing on Pfsense and Azure portal both<br />
and Wan to Lan routing on Pfsense and azure portal both<br />
Is IP forwarding still required on Lan Ip configuration required to be done</p>
<p>Your insights will be really helpful and i have a lab ready also if you want to work together on this scenario on Azure.<br />
Looking forward to hear from you.<br />
Regards,<br />
Jeegar</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Pantelis Apostolidis		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-36</link>

		<dc:creator><![CDATA[Pantelis Apostolidis]]></dc:creator>
		<pubDate>Tue, 20 Feb 2018 10:06:11 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-36</guid>

					<description><![CDATA[A thought on how to hide your VM behind the pfSense. 

The VM is at the subnet 10.1.2.0/24
The pfSense LAN NIC at the subnet 10.1.0.0/24
The pfSense WAN NIC at the subnet 10.1.3.0/24

Configuration on pfSense:

LAN interface
static IP 10.1.0.5/24
IPv4 Upstream gateway: None
Azure NIC: Static IP 10.1.0.5 on subnet 10.1.0.0/24

WAN interface
static IP: 10.1.3.4/24
IPv4 Upstream gateway: (new gateway with the first IP of the Azure subnet) 10.1.3.1
Azure NIC: Static IP 10.1.3.4 on subnet 10.1.3.0/24

Rules
WAN: None
Lan:   Default

System / Routing / Gateways
new gateway: subnet  LAN  10.1.0.1  10.1.0.1  

System  / Routing / Static Routes
new static route:
10.1.2.0/24  subnet - 10.1.0.1  LAN  

VM on subnset 10.1.2.0/24
At the pfSense I added a NAT rule port 38745 to 10.1.2.4 port 3389 for RDP to my VM

At the Azure Portal, the custom Route 0.0.0.0/0 to 10.1.0.5, that is applied at the VM&#039;s subnet 10.1.2.0/24, will forward all traffic of the VM to the pfSense

So to access the VM i RDP to the public ip of pfSense @ port 38745]]></description>
			<content:encoded><![CDATA[<p>A thought on how to hide your VM behind the pfSense. </p>
<p>The VM is at the subnet 10.1.2.0/24<br />
The pfSense LAN NIC at the subnet 10.1.0.0/24<br />
The pfSense WAN NIC at the subnet 10.1.3.0/24</p>
<p>Configuration on pfSense:</p>
<p>LAN interface<br />
static IP 10.1.0.5/24<br />
IPv4 Upstream gateway: None<br />
Azure NIC: Static IP 10.1.0.5 on subnet 10.1.0.0/24</p>
<p>WAN interface<br />
static IP: 10.1.3.4/24<br />
IPv4 Upstream gateway: (new gateway with the first IP of the Azure subnet) 10.1.3.1<br />
Azure NIC: Static IP 10.1.3.4 on subnet 10.1.3.0/24</p>
<p>Rules<br />
WAN: None<br />
Lan:   Default</p>
<p>System / Routing / Gateways<br />
new gateway: subnet  LAN  10.1.0.1  10.1.0.1  </p>
<p>System  / Routing / Static Routes<br />
new static route:<br />
10.1.2.0/24  subnet &#8211; 10.1.0.1  LAN  </p>
<p>VM on subnset 10.1.2.0/24<br />
At the pfSense I added a NAT rule port 38745 to 10.1.2.4 port 3389 for RDP to my VM</p>
<p>At the Azure Portal, the custom Route 0.0.0.0/0 to 10.1.0.5, that is applied at the VM&#8217;s subnet 10.1.2.0/24, will forward all traffic of the VM to the pfSense</p>
<p>So to access the VM i RDP to the public ip of pfSense @ port 38745</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Pantelis Apostolidis		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-35</link>

		<dc:creator><![CDATA[Pantelis Apostolidis]]></dc:creator>
		<pubDate>Thu, 15 Feb 2018 14:48:51 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-35</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-33&quot;&gt;Callan&lt;/a&gt;.

Hi, thanks for the revision. I corrected the link and also removed the NSG part, at the test I added the NSG form the Portal and I forgot to change the Script.]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-33">Callan</a>.</p>
<p>Hi, thanks for the revision. I corrected the link and also removed the NSG part, at the test I added the NSG form the Portal and I forgot to change the Script.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Callan		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-34</link>

		<dc:creator><![CDATA[Callan]]></dc:creator>
		<pubDate>Thu, 15 Feb 2018 03:48:34 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-34</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-33&quot;&gt;Callan&lt;/a&gt;.

This one is redundant too:
$backendSubnet = Get-AzureRMVirtualNetworkSubnetConfig -Name default -VirtualNetwork $vnet]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-33">Callan</a>.</p>
<p>This one is redundant too:<br />
$backendSubnet = Get-AzureRMVirtualNetworkSubnetConfig -Name default -VirtualNetwork $vnet</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Callan		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-33</link>

		<dc:creator><![CDATA[Callan]]></dc:creator>
		<pubDate>Thu, 15 Feb 2018 03:31:41 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-33</guid>

					<description><![CDATA[Hey, Good tutorial. My image is uploading now and I hope to test later this evening.
A few small things i noticed:

in the Azure agent install you left off the last t (gi.. t) on this line:
git clone https://github.com/Azure/WALinuxAgent.gi

This line of the create VM script isn&#039;t used anywhere either.
$NSGname = &quot;******&quot;

Otherwise great to get this all in one spot- thank you. I had to do quite a bit of searching last time I loaded an image to Azure and even now, Azure thinks the start up fails every time because the agent isn&#039;t running correctly (it runs fine so I haven&#039;t bothered to change it)]]></description>
			<content:encoded><![CDATA[<p>Hey, Good tutorial. My image is uploading now and I hope to test later this evening.<br />
A few small things i noticed:</p>
<p>in the Azure agent install you left off the last t (gi.. t) on this line:<br />
git clone <a href="https://github.com/Azure/WALinuxAgent.gi" rel="nofollow ugc">https://github.com/Azure/WALinuxAgent.gi</a></p>
<p>This line of the create VM script isn&#8217;t used anywhere either.<br />
$NSGname = &#8220;******&#8221;</p>
<p>Otherwise great to get this all in one spot- thank you. I had to do quite a bit of searching last time I loaded an image to Azure and even now, Azure thinks the start up fails every time because the agent isn&#8217;t running correctly (it runs fine so I haven&#8217;t bothered to change it)</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Pantelis Apostolidis		</title>
		<link>https://www.cloudcorner.gr/microsoft/azure/custom-pfsense-on-azurerm-a-complete-guide/#comment-32</link>

		<dc:creator><![CDATA[Pantelis Apostolidis]]></dc:creator>
		<pubDate>Wed, 14 Feb 2018 08:02:39 +0000</pubDate>
		<guid isPermaLink="false">https://www.e-apostolidis.gr/?p=1528#comment-32</guid>

					<description><![CDATA[EDITED Feb 14, 2018 after Kirk Henry&#039;s comments. Added the IP forwarding step.]]></description>
			<content:encoded><![CDATA[<p>EDITED Feb 14, 2018 after Kirk Henry&#8217;s comments. Added the IP forwarding step.</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
