pfSense Configuration Recipes

The recipes in this section walk administrators through configuring various aspects of pfSense® software.

General

• Basic Firewall Configuration Example

• Blocking Web Sites

• Using an External Wireless Access Point

• Using Software from FreeBSD

• Using NAT and FTP without a Proxy

• Configuring pfSense Software for Online Gaming

• Migrating an Assigned LAN to LAGG

• Accessing a CPE/Modem from Inside the Firewall

• Exporting NetFlow with softflowd

• Configuring Switches with VLANs

• Using the Shaper Wizard to Configure ALTQ Traffic Shaping

DNS

• Configuring DNS over TLS

• Configuring BIND as an RFC 2136 Dynamic DNS Server

• Blocking External Client DNS Queries

• Redirecting Client DNS Requests

Authentication

• Accessing the Firewall Filesystem with SCP

• Granting Users Access to SSH

• External User Authentication Examples

• Authenticating Users with Google Cloud Identity

• Using EAP and PEAP with FreeRADIUS

• Using Mobile One-Time Passwords with FreeRADIUS

• Authenticating from Active Directory using RADIUS/NPS

Firewall/NAT

• Allowing Remote Access to the GUI

• Preventing RFC1918 Traffic from Exiting a WAN Interface

• Accessing Port Forwards from Local Networks

• Configuring NAT for a VoIP PBX

• Configuring NAT for VoIP Phones

Routing

• Dynamic Routing Protocol Basics

• Configuring IPv6 Through A Tunnel Broker Service

• Configuring Multi-WAN for IPv6

• Routing Public IP Addresses

High Availability

• High Availability Configuration Example

• High Availability Configuration Example with Multi-WAN

• High Availability Configuration Example without NAT

IPsec

• IPsec Site-to-Site VPN Example with Pre-Shared Keys

• IPsec Site-to-Site VPN Example with Certificate Authentication

• IPsec Remote Access VPN Example Using IKEv2 with EAP-MSCHAPv2

• IPsec Remote Access VPN Example Using IKEv2 with EAP-RADIUS

• IPsec Remote Access VPN Example Using IKEv2 with EAP-TLS

• Configuring IPsec IKEv2 Remote Access VPN Clients

• IPsec Remote Access VPN Example Using IKEv1 with Xauth

• IPsec Remote Access VPN Example Using IKEv1 with Pre-Shared Keys

• Routing Internet Traffic Through a Site-to-Site IPsec Tunnel

• Connecting to Cisco PIX/ASA Devices with IPsec

• Connecting to Cisco IOS Devices with IPsec

L2TP/IPsec

• L2TP/IPsec Remote Access VPN Configuration Example

• Connecting to L2TP/IPsec from Android

OpenVPN

• OpenVPN Site-to-Site Configuration Example with SSL/TLS

• OpenVPN Site-to-Site Configuration Example with Shared Key

• OpenVPN Remote Access Configuration Example

• Adding OpenVPN Remote Access Users

• Installing OpenVPN Remote Access Clients

• Configuring a Single Multi-Purpose OpenVPN Instance

• Authenticating OpenVPN Users with FreeRADIUS

• Authenticating OpenVPN Users with RADIUS via Active Directory

• Connecting to an OpenVPN Access Server

• Connecting OpenVPN Sites with Conflicting IP Subnets

• Routing Internet Traffic Through A Site-To-Site OpenVPN Tunnel

• Bridging OpenVPN Connections to Local Networks

WireGuard

• WireGuard Remote Access VPN Configuration Example

• WireGuard Site-to-Site VPN Configuration Example

• WireGuard VPN Client Configuration Example

Cache/Proxy

• A Brief Introduction to Web Proxies and Reporting: Squid, SquidGuard, and Lightsquid

• Authenticating Squid Package Users with FreeRADIUS

• Configuring the Squid Package as a Transparent HTTP Proxy

• Setting up WPAD Autoconfigure for the Squid Package

Virtualization

• Virtualizing pfSense with VMware vSphere / ESXi

• Virtualizing pfSense with Hyper-V

• Virtualizing with Proxmox® VE