How to configure pFSense?

We have already done pFSense installation, you can check it here – https://www.informaticar.net/how-to-install-pfsense-on-hyper-v/ , now it is time for the simple configuration of the firewall.

I`ll be testing with the following: Hyper-V hypervisor, Windows Server 2016 STD Evaluation, pFSense 2.3.4

Windows Server 2016 has only internal network (for communication with other VMs on LAN) – 10.20.20.2/16

pFSense has two network interfaces – LAN (for communication with VMs within local network) 10.20.20.1/16

WAN (for intrnet connection) – that will be my fixed public IP address.

Let us start with the pFSense – after installation I`m greeted with following screen

We have two network interfaces hn0 and hn1, but which one is LAN, and which is WAN?

Head on to the Settings of the pFSense VM |Hardware |Select Network Adapter and expand + sign | Select Advanced Features | You should see MAC address of the network adapter. It seams like hn0 is my LAN adapter, and hn1 is WAN adapter.

Let’s begin with the setup

We will not be using VLANs in this LAB. This is simple LAB, with just firewall config.

“Should VLANs be set up now [y:n]? N

Next step is WAN link selection (public/internet NIC) – since we were smart enough we know that hn1 is our WAN interface.

I don`t need auto detection, I`ll enter hn1 – confirm with ENTER

Next we are asked for LAN interface – that will be hn0 in this case – confirm with ENTER

Just leave blank and press enter

If you are sure you assigned right interfaces – enter Y

…

After some time…

I want to setup another LAN address for LAN interface. So I`ll start another wizard.

Enter 2 “Set Interface(s) IP address

We want to change LAN ip address so we`ll choose 2 – LAN

I`m entering new IP address – in this LAB – 10.20.20.1

Subnet mask in this case is 16bit

Just press enter and leave blank

We`ll also won`t be needing IPv6 IP so I`ll leave that blank and confirm with Enter

I don`t want DHCP server running on pFSense so I`ll choose N. You have an option for pFSense to be your DHCP server for LAN. pFSense in general has many great network options.

For now we want http protocol for our web configurator – Y

… Press Enter

We are back on the login screen, but now with different LAN IP address

Now, that is it for now for the pFSense virtual machine. Let’s head to Windows Server 2016 VM that is configured with only LAN access on IP 10.20.20.2 – IP is static – 10.20.20.1 is configured as Gateway and 8.8.8.8 as DNS

Virtual machine should be able to reach internet after we complete pFSense configuration.

In Windows Server VM we`ll head to following address – http://10.20.20.1 (LAN address we assigned to the pfSense)

I`m greeted with login screen – that is good signal, we done everything right so far.

Default username and password for pFSense are as follows

Default username: admin password: pfsense

After login – another wizard screen

Let us configure a bit more

You`ll be asked for pFSense Gold subscription. pFSense is free product, but if you use it heavily I recommend supporting developers of this great product.

Enter name for your firewall installation and Domain if you have one, and DNS servers – I entered Google DNS servers, you can enter DNS servers from your provider or whatever works for you.

I also left Default NTP server (if you have domain or ISP NTP you can enter it here) and selected my city for Timezone |Next

Now to the important step – WAN interface configuration

I have static IP so I`ll be choosing Static under SelectedType. You can also configure DHCP, PPoE or PPTP connections here.

Other options on this screenshot are in my case blank

Under Static IP configuration you`ll enter IP address and Subnet Mask your provider gave you, and you`ll also enter Upstream Gateway(IP Address of ISPs router)

I masked my IP address partially.

DHCP client configuration and PPoE configuration are blank for me.

PPTP configuration also blank in my case

Under RFC1918 Networks and Block bogon networks I selected both marks |Next

We already configured LAN so I`ll just select Next

It is recommended for you to change default password – do not enter default or simple password, you need strong password for your firewall configuration |Next