Some background, Pfsense is running on FreeBSD and requires 2 NIC card in order to function normally. One network interface to support WAN traffic while another network interface to support LAN traffic. Upon the initial configuration, there will be access to the web interface. Allowing us to perform further configuration based on the functionality of the Pfsense firewall. For this blog, we will be focusing on the community version.
Configuration steps to take during the first bootup of Pfsense:
Select <Install - Install pfsense>
Go with "default keymap" option
Go with <Guided Disk Setup> and let the installation run
Nope
Reboot!
Once the reboot is done, you will be presented with the the home page showing different menu options and most importantly, the IP addresses of the two network interfaces. Where em0 is tagged as WAN for access to the internet and em1 is tagged as LAN for access communication with devices in the internal network. There is no VLAN involved in this setup.
There are a few scenario to consider, if Pfsense is behind a router based on the setup in the image above, the only access to the web console is via the WAN address. As Pfsense has not been configured to communicate with devices in the internal network.
However, if Pfsense is placed after the router, you would need to configure the LAN interface IP address to DHCP under option 2. From there, access Pfsense web console via the newly configured LAN address.
Login using default credentials:
Username > admin
Password > pfsense
A welcome page will be presented during the first login.
Click Next to proceed with the Setup
Click Next to proceed with the Setup
Assign a hostname and domain of your choice, follow by a preferred primary and secondary DNS server. Check on the last checkbox (Override DNS) if the Primary and Secondary DNS Server are to be overridden by DHCP/PPP on WAN.
Assign a Time Server hostname of your choice and configure the time zone
The only configuration performed in this step (4/9) is to configure DHCP for the WAN interface.
Assign DHCP and subnet mask to the LAN interface or static if there is no DHCP server.
Enter a new Admin Password. Upon performing this step, the default password used previously will no longer be valid. Click
Dashboard page upon completing the setup:
Comentários