Book Image

pfSense 2.x Cookbook - Second Edition

By : David Zientara
Book Image

pfSense 2.x Cookbook - Second Edition

By: David Zientara

Overview of this book

pfSense is an open source distribution of the FreeBSD-based firewall that provides a platform for ?exible and powerful routing and firewalling. The versatility of pfSense presents us with a wide array of configuration options, which makes determining requirements a little more difficult and a lot more important compared to other offerings. pfSense 2.x Cookbook – Second Edition starts by providing you with an understanding of how to complete the basic steps needed to render a pfSense firewall operational. It starts by showing you how to set up different forms of NAT entries and firewall rules and use aliases and scheduling in firewall rules. Moving on, you will learn how to implement a captive portal set up in different ways (no authentication, user manager authentication, and RADIUS authentication), as well as NTP and SNMP configuration. You will then learn how to set up a VPN tunnel with pfSense. The book then focuses on setting up traffic shaping with pfSense, using either the built-in traffic shaping wizard, custom ?oating rules, or Snort. Toward the end, you will set up multiple WAN interfaces, load balancing and failover groups, and a CARP failover group. You will also learn how to bridge interfaces, add static routing entries, and use dynamic routing protocols via third-party packages.
Table of Contents (18 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Configuring NTP


This recipe describes how to configure NTP on your pfSense system. Network Time Protocol (NTP), is an application-layer protocol. The purpose of NTP is to synchronize internet-connected devices to within a few milliseconds of Coordinated Universal Time (UTC). In most cases, the minimal configuration done when pfSense is initially set up is enough to ensure that the time on your pfSense system is accurate. You may, however, want to perform additional configuration under some circumstances. For example, if your system is part of a certificate-validating infrastructure, or if you're running pfSense on an embedded system that does not have its own clock.

 

In this recipe, we will configure NTP and add several more NTP pools.

How to do it...

  1. Navigate to Services | NTP. You should be on the default Settings tab, as shown in the following screenshot:

 

  1. In the Interface list box, select WAN as the interface on which to listen.
  2. Click on the Add button to add a new pool or server.
  3. Type 0.pool...