Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

pfSense 2.x Cookbook - Second Edition

By : David Zientara

5 (1)

pfSense 2.x Cookbook

5 (1)

By: David Zientara

Overview of this book

pfSense is an open source distribution of the FreeBSD-based firewall that provides a platform for ?exible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options, which makes determining requirements a little more difficult and a lot more important compared to other offerings. pfSense 2.x Cookbook – Second Edition starts by providing you with an understanding of how to complete the basic steps needed to render a pfSense firewall operational. It starts by showing you how to set up different forms of NAT entries and firewall rules and use aliases and scheduling in firewall rules. Moving on, you will learn how to implement a captive portal set up in different ways (no authentication, user manager authentication, and RADIUS authentication), as well as NTP and SNMP configuration. You will then learn how to set up a VPN tunnel with pfSense. The book then focuses on setting up traffic shaping with pfSense, using either the built-in traffic shaping wizard, custom ?oating rules, or Snort. Toward the end, you will set up multiple WAN interfaces, load balancing and failover groups, and a CARP failover group. You will also learn how to bridge interfaces, add static routing entries, and use dynamic routing protocols via third-party packages.

Preface

Preface

Who this book is for

What this book covers

To get the most out of this book

Sections

Get in touch

Free Chapter

Initial Configuration

Initial Configuration

Introduction

Applying basic settings to General Setup

Identifying and assigning interfaces

Configuring a WAN interface

Configuring a LAN interface

Configuring optional interfaces from the console

Enabling SSH access

Generating authorized RSA keys

Configuring SSH RSA key authentication

Accessing the SSH

Configuring VLANs

Assigning interfaces from the console

Configuring a WAN interface from the console

Configuring a LAN interface from the console

Configuring optional interfaces from the console

Configuring VLANs from the console

Essential Services

Essential Services

Introduction

Configuring the DHCP server

Configuring the DHCP6 server

Configuring static DHCP mappings

Configuring the DHCP relay

Specifying alternate DNS servers

Configuring the DNS resolver

Configuring a stand-alone DHCP/DNS server

Configuring dynamic DNS

Adding a wireless access point

Firewall and NAT

Firewall and NAT

Introduction

Creating and using aliases

Creating a firewall rule

Setting a firewall rule schedule

Creating a floating rule

Creating a NAT port forwarding entry

Creating an outbound NAT entry

Creating a 1:1 NAT entry

Creating an NPt entry

Enabling UPnP and NAT-PnP

Additional Services

Additional Services

Introduction

Creating a captive portal without authentication

Creating a captive portal with voucher authentication

Creating a captive portal with User Manager authentication

Creating a captive portal with RADIUS authentication

Configuring NTP

Configuring SNMP

Virtual Private Networking

Virtual Private Networking

Introduction

Configuring the IPsec OpenVPN server – peer-to-peer

Configuring the IPsec VPN service – client/server

Connecting to the IPsec VPN service

Configuring the OpenVPN service

Connecting to the OpenVPN service

Configuring the L2TP VPN service

Traffic Shaping

Traffic Shaping

Introduction

Configuring traffic shaping using the traffic-shaping wizard

Configuring traffic shaping using floating rules

Configuring traffic shaping using Snort

Redundancy, Load Balancing, and Failover

Redundancy, Load Balancing, and Failover

Introduction

Adding multiple WAN interfaces

Configuring server load balancing

Configuring a CARP failover group

Routing and Bridging

Routing and Bridging

Introduction

Bridging interfaces

Adding a static route

Configuring RIP using routed

Configuring BGP using FRR

Configuring OSPF using FRR

Services and Maintenance

Services and Maintenance

Introduction

Enabling Wake-on-LAN

Configuring PPPoE

Configuring external logging with a syslog server

Using ping

Using traceroute

Using netstat

Using pfTop

Using tcpdump

Using tcpflow

Backing Up and Restoring pfSense

Backing Up and Restoring pfSense

Introduction

Backing up pfSense

Restoring pfSense

Updating pfSense

Determining Hardware Requirements

Determining Hardware Requirements

Determining our deployment scenario

Determining our throughput requirements

Determining our interface requirements

Choosing a standard or embedded image

Choosing a form factor

Summary

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Configuring a LAN interface

This recipe describes how to configure the Local Area Network (LAN) internal interface of our pfSense firewall.

Getting ready

The LAN interface is the interface to the internal network through which our nodes will be able to securely connect to other internal nodes and to the internet. An assigned LAN interface is required.

How to do it...

Navigate to Interfaces | LAN.
Check the Enable Interface checkbox:

Choose an IPv4 Configuration Type (usually Static IPv4).
Choose an IPv6 Configuration Type (or leave it set to None).
Enter an IPv4 Address in the appropriate field, and the correct CIDR in the adjacent drop-down box. Leave IPv4 Upstream gateway set to None.
If you enabled IPv6 by setting the IPv6 Configuration Type, enter an IPv4 Address in the appropriate field and the correct CIDR in the adjacent drop-down box.
Leave Block private networks and Block bogon networks unchecked (they should be unchecked by default).
When you are done making changes, click on the Save button. When the page reloads, click on the Apply Changes button.

How it works...

You have just defined your first internal network. If you have been following these recipes in order, you now have met the minimal requirements for a fully functional network. You can now either continue adding networks, or start configuring the rules to regulate traffic between the networks.

There's more...

You can now connect a switch to the LAN port of your pfSense system, and connect nodes to the LAN network.

See also

The Identifying and assigning interfaces recipe in this chapter
The Configuring a WAN interface recipe in this chapter
The Configuring optional interfaces from the console recipe in this chapter

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

pfSense 2.x Cookbook

Search

Your notes and bookmarks