Book Image

Mastering pfSense - Second Edition

By : David Zientara
Book Image

Mastering pfSense - Second Edition

By: David Zientara

Overview of this book

pfSense has the same reliability and stability as even the most popular commercial firewall offerings on the market – but, like the very best open-source software, it doesn’t limit you. You’re in control – you can exploit and customize pfSense around your security needs. Mastering pfSense - Second Edition, covers features that have long been part of pfSense such as captive portal, VLANs, traffic shaping, VPNs, load balancing, Common Address Redundancy Protocol (CARP), multi-WAN, and routing. It also covers features that have been added with the release of 2.4, such as support for ZFS partitions and OpenVPN 2.4. This book takes into account the fact that, in order to support increased cryptographic loads, pfSense version 2.5 will require a CPU that supports AES-NI. The second edition of this book places more of an emphasis on the practical side of utilizing pfSense than the previous edition, and, as a result, more examples are provided which show in step-by-step fashion how to implement many features.
Table of Contents (15 chapters)

Network Prefix Translation

Network Prefix Translation (NPt) allows us to map an internal IPv6 prefix to an external IPv6 prefix. Normally, we try to avoid using NAT when we use IPv6, but there are some cases where being able to translate IPv6 prefixes is helpful:

  • It provides a means of implementing multihoming (connecting a host or network to multiple networks) on small networks. Another method is DHCPv6.
  • It potentially makes routing more efficient, as it makes addresses on edge networks independent of addresses on upstream networks, and the upstream networks can then work only with the contiguous ISP-allocated addresses, which will make route summarization easier (and our routing tables much smaller).

NPt functions similarly to 1:1 NAT for IPv4 addresses, only in this case, we are translating prefixes, not complete addresses. We can also use NPt to translate addresses between...