Book Overview & Buying
Table Of Contents
Feedback & Rating

pfSense 2.x Cookbook - Second Edition

By : David Zientara

5 (1)

Buy this Book

pfSense 2.x Cookbook

5 (1)

By: David Zientara

Buy this Book

Overview of this book

pfSense is an open source distribution of the FreeBSD-based firewall that provides a platform for ?exible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options, which makes determining requirements a little more difficult and a lot more important compared to other offerings. pfSense 2.x Cookbook – Second Edition starts by providing you with an understanding of how to complete the basic steps needed to render a pfSense firewall operational. It starts by showing you how to set up different forms of NAT entries and firewall rules and use aliases and scheduling in firewall rules. Moving on, you will learn how to implement a captive portal set up in different ways (no authentication, user manager authentication, and RADIUS authentication), as well as NTP and SNMP configuration. You will then learn how to set up a VPN tunnel with pfSense. The book then focuses on setting up traffic shaping with pfSense, using either the built-in traffic shaping wizard, custom ?oating rules, or Snort. Toward the end, you will set up multiple WAN interfaces, load balancing and failover groups, and a CARP failover group. You will also learn how to bridge interfaces, add static routing entries, and use dynamic routing protocols via third-party packages.

Preface

Who this book is for

What this book covers

To get the most out of this book

Sections

Get in touch

Free Chapter

Initial Configuration

Introduction

Applying basic settings to General Setup

Identifying and assigning interfaces

Configuring a WAN interface

Configuring a LAN interface

Configuring optional interfaces from the console

Enabling SSH access

Generating authorized RSA keys

Configuring SSH RSA key authentication

Accessing the SSH

Configuring VLANs

Assigning interfaces from the console

Configuring a WAN interface from the console

Configuring a LAN interface from the console

Configuring optional interfaces from the console

Configuring VLANs from the console

Essential Services

Introduction

Configuring the DHCP server

Configuring the DHCP6 server

Configuring static DHCP mappings

Configuring the DHCP relay

Specifying alternate DNS servers

Configuring the DNS resolver

Configuring a stand-alone DHCP/DNS server

Configuring dynamic DNS

Adding a wireless access point

Firewall and NAT

Introduction

Creating and using aliases

Creating a firewall rule

Setting a firewall rule schedule

Creating a floating rule

Creating a NAT port forwarding entry

Creating an outbound NAT entry

Creating a 1:1 NAT entry

Creating an NPt entry

Enabling UPnP and NAT-PnP

Additional Services

Introduction

Creating a captive portal without authentication

Creating a captive portal with voucher authentication

Creating a captive portal with User Manager authentication

Creating a captive portal with RADIUS authentication

Configuring NTP

Configuring SNMP

Virtual Private Networking

Introduction

Configuring the IPsec OpenVPN server – peer-to-peer

Configuring the IPsec VPN service – client/server

Connecting to the IPsec VPN service

Configuring the OpenVPN service

Connecting to the OpenVPN service

Configuring the L2TP VPN service

Traffic Shaping

Introduction

Configuring traffic shaping using the traffic-shaping wizard

Configuring traffic shaping using floating rules

Configuring traffic shaping using Snort

Redundancy, Load Balancing, and Failover

Introduction

Adding multiple WAN interfaces

Configuring server load balancing

Configuring a CARP failover group

Routing and Bridging

Introduction

Bridging interfaces

Adding a static route

Configuring RIP using routed

Configuring BGP using FRR

Configuring OSPF using FRR

Services and Maintenance

Introduction

Enabling Wake-on-LAN

Configuring PPPoE

Configuring external logging with a syslog server

Using ping

Using traceroute

Using netstat

Using pfTop

Using tcpdump

Using tcpflow

Backing Up and Restoring pfSense

Introduction

Backing up pfSense

Restoring pfSense

Updating pfSense

Determining Hardware Requirements

Determining our deployment scenario

Determining our throughput requirements

Determining our interface requirements

Choosing a standard or embedded image

Choosing a form factor

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

5 (1)

5 star

100%

4 star

3 star

2 star

1 star

Other Books You May Enjoy

If you enjoyed this book, you may be interested in these other books by Packt:

Learn pfSense 2.4
David Zientara

ISBN: 978-1-78934-311-3

Install pfSense
Configure additional interfaces, and enable and configure DHCP
Understand Captive portal
Understand firewalls and NAT, and traffic shaping
Learn in detail about VPNs
Understand Multi-WAN
Learn about routing and bridging in detail
Understand the basics of diagnostics and troubleshooting networks

Mastering pfSense - Second Edition
David Zientara

ISBN: 978-1-78899-317-3

Configure pfSense services such as DHCP, Dynamic DNS, captive portal, DNS, NTP and SNMP
Set up a managed switch to work with VLANs
Use pfSense to allow, block and deny traffic, and to implement Network Address Translation (NAT)
Make use of the traffic shaper to lower and raise the priority of certain types of traffic
Set up and connect...