PfSense HA on Proxmox with just one public IP, setting up OpenVPN

Hi,

I’m in this setup:

ISP Modem:
Public IP: xxx.xxx.xxx.xxx
DHCP/Gateway IP: 192.168.1.1

One NIC goes to Proxmox eno1 (one for each node in the cluster, through an unmanaged switch)

Proxmxox Cluster with:

pfSesne1:

  • Virtio NIC on eno1 WAN IP: 192.168.1.101
  • CARP VIP IP: 192.168.1.103
  • LAN (VLAN10): 10.0.10.1
  • OPTx (VLAN100) IP: 10.0.100.1

pfSense2:
*Virtio NIC on eno1 WAN IP: 192.168.1.102
*CARP VIP IP: 191.168.1.103

  • LAN (VLAN10): 10.0.10.2
  • OPTx (VLAN100) IP: 10.0.100.2

Everything works really well, I’m actually posting this from that network (VLAN10 - LAN)

Thing is: I can’t seem to be able to set all the firewalls/NATs/Forwards/else to access my system with pfSense’s OpenVPN, I’d like to access VLAN2 (10.0.100.0/24)

  1. I disabled the firewall on ISP Modem, PortForwarded everything to CARP VIP IP 192.168.1.103
  2. I disabled (I think) all the firewalls on Proxmox (cluster and node level)
  3. I followed the settings in pfSense’s docs to add an OpenVPN for server setup (tunnel net 10.0.101.0/24 - not assigned to any pfSense interface, destination net 10.0.100.0/24) and firewall rules setup

I don’t seem to see much in the logs, on pfSense, probably the traffic is being blocked/routed elsewhere
I don’t seem to see much in the ISP modem/router logs on OpenVPN port

Anyone has tried a similar setup can point me to proper settings to make this thing fluid?
I’ll also need something similar when I’ll host other services on Proxmox through the network managed by the virtualized pfSense HA setup.

Thank you very much in advance!