I have a VM that I'm using to run my security cameras.  My server has 4 NICs on it.  I want to dedicate a NIC to that VM as it's a segregated LAN...I don't want it to have any Internet access.  I want it to just be local.

 

But I'd like to use the other NICs to access the server so I can view the VM, make new shares, etc.

 

What's the best way to do this?

Edited January 6, 20197 yr by rmp5s

Nevermind.  Lots of trial and error later, I got it working.

 

I had to shutdown VMs and Docker, then go to Settings -> Networking and turn off bridging and bonding.  Then I configured the NICs the way I wanted them, turned VMs and Docker back on, edited the VM and made sure the VM was assigned the right bridge, br1 in my case.

 

It makes sense when you get in there and start messing with stuff.  

exactly the answer i was looking for. thx for leaving this post here and answering it yourself

I have successfully done this on a new UnRaid server with Version 7 to install pfSense (with two NICS)

I have a HP Microserver gen 10 plus with integrated 4 port 1G nics (ie no other separate NIC cards installed)

Under Tools/system devices - each had their own IOMMU group (13,14,15 ect) even though they had the same ID - just ticked the ones I wanted to bind to VFIO at boot, and followed spaceinvaderone's YT video (8 years old!) after that to install pfSense as a VM.

- ticked the PCI Devices which were the two NICS in the VM settings

- Removed the "Interface" settings (XML View)

Via the UnRaid server using a keyboard/mouse and monitor - manually set the interfaces and their IP addresses - then was able to login to the pfSense interface .

 

NOTE: it is tricky to setup if you are using the "Trial" version of unraid - as it requires an internet connection before it will mount so doing any reboots you need to bypass the pfSense router (obviously as it isnt running) - Im still waiting for a new USB and internal drives to arrive in the post before I pay for the license.

 

If anything happens that stops the mount/docker/VM from running - I'll try and have a plan "B" (probably need access to the actual server hardware and use  Kb mouse and monitor).

 

Edited March 16, 20251 yr by WaldonPaul