How to subnet hosted VMs
- by bwizzy
I have a network of VMs each having a LAN IP address and a public IP address.  They each have a 1:1 NAT map for public access via the public IP for HTTP, SSH etc.  I'm trying to figure out a way to restrict the LAN IPs from talking to each other, but there are some cases where a group of LAN IPs will need to communicate.  
I'm using pfSense as a firewall / router on a 192.168.0.0/24 configuration.  It seems like I could assign each VM it's own subnet and add a static route to the firewall for that VM to get back to the firewall for internet access / other fw rules.  Is that right?
I assigned 1 VM with:
address 192.168.1.2
netmask 255.255.255.254
gateway 192.168.1.1
Then added a static route on the FW's LAN interface using 192.168.1.0/30 as the destination network and 192.168.1.1 as the gateway.  
Nothing appears to be working, anyone have any ideas?  Please be aware I'm not that familiar with subnets.
Thanks!