References
Recipes
The recipes in this section walk administrators through configuring various aspects of pfSense® software.
Basic Firewall Configuration Example Blocking Web Sites Using an External Wireless Access Point Using Software from FreeBSD Using NAT and FTP without a Proxy Configuring pfSense Software for Online Gaming Migrating an Assigned LAN to LAGG Accessing a CPE/Modem from Inside the Firewall Exporting NetFlow with softflowd Configuring Switches with VLANs Using the Shaper Wizard to Configure ALTQ Traffic Shaping
Basic Firewall Configuration Example
Blocking Web Sites
Using an External Wireless Access Point
Using Software from FreeBSD
Using NAT and FTP without a Proxy
Configuring pfSense Software for Online Gaming
Migrating an Assigned LAN to LAGG
Accessing a CPE/Modem from Inside the Firewall
Exporting NetFlow with softflowd
Configuring Switches with VLANs
Using the Shaper Wizard to Configure ALTQ Traffic Shaping
Configuring DNS over TLS Configuring BIND as an RFC 2136 Dynamic DNS Server Blocking External Client DNS Queries Redirecting Client DNS Requests
Configuring DNS over TLS
Configuring BIND as an RFC 2136 Dynamic DNS Server
Blocking External Client DNS Queries
Redirecting Client DNS Requests
Accessing the Firewall Filesystem with SCP Granting Users Access to SSH External User Authentication Examples Authenticating Users with Google Cloud Identity Using EAP and PEAP with FreeRADIUS Using Mobile One-Time Passwords with FreeRADIUS Authenticating from Active Directory using RADIUS/NPS
Accessing the Firewall Filesystem with SCP
Granting Users Access to SSH
External User Authentication Examples
Authenticating Users with Google Cloud Identity
Using EAP and PEAP with FreeRADIUS
Using Mobile One-Time Passwords with FreeRADIUS
Authenticating from Active Directory using RADIUS/NPS
Allowing Remote Access to the GUI Preventing RFC1918 Traffic from Exiting a WAN Interface Accessing Port Forwards from Local Networks Configuring NAT for a VoIP PBX Configuring NAT for VoIP Phones
Allowing Remote Access to the GUI
Preventing RFC1918 Traffic from Exiting a WAN Interface
Accessing Port Forwards from Local Networks
Configuring NAT for a VoIP PBX
Configuring NAT for VoIP Phones
Dynamic Routing Protocol Basics Configuring IPv6 Through A Tunnel Broker Service Configuring Multi-WAN for IPv6 Routing Public IP Addresses
Dynamic Routing Protocol Basics
Configuring IPv6 Through A Tunnel Broker Service
Configuring Multi-WAN for IPv6
Routing Public IP Addresses
High Availability Configuration Example High Availability Configuration Example with Multi-WAN High Availability Configuration Example without NAT
High Availability Configuration Example
High Availability Configuration Example with Multi-WAN
High Availability Configuration Example without NAT
IPsec Site-to-Site VPN Example with Pre-Shared Keys IPsec Site-to-Site VPN Example with Certificate Authentication IPsec Remote Access VPN Example Using IKEv2 with EAP-MSCHAPv2 IPsec Remote Access VPN Example Using IKEv2 with EAP-RADIUS IPsec Remote Access VPN Example Using IKEv2 with EAP-TLS Configuring IPsec IKEv2 Remote Access VPN Clients IPsec Remote Access VPN Example Using IKEv1 with Xauth IPsec Remote Access VPN Example Using IKEv1 with Pre-Shared Keys Routing Internet Traffic Through a Site-to-Site IPsec Tunnel Connecting to Cisco PIX/ASA Devices with IPsec Connecting to Cisco IOS Devices with IPsec
IPsec Site-to-Site VPN Example with Pre-Shared Keys
IPsec Site-to-Site VPN Example with Certificate Authentication
IPsec Remote Access VPN Example Using IKEv2 with EAP-MSCHAPv2
IPsec Remote Access VPN Example Using IKEv2 with EAP-RADIUS
IPsec Remote Access VPN Example Using IKEv2 with EAP-TLS
Configuring IPsec IKEv2 Remote Access VPN Clients
IPsec Remote Access VPN Example Using IKEv1 with Xauth
IPsec Remote Access VPN Example Using IKEv1 with Pre-Shared Keys
Routing Internet Traffic Through a Site-to-Site IPsec Tunnel
Connecting to Cisco PIX/ASA Devices with IPsec
Connecting to Cisco IOS Devices with IPsec
L2TP/IPsec Remote Access VPN Configuration Example Connecting to L2TP/IPsec from Android
L2TP/IPsec Remote Access VPN Configuration Example
Connecting to L2TP/IPsec from Android
OpenVPN Site-to-Site Configuration Example with SSL/TLS OpenVPN Site-to-Site Configuration Example with Shared Key OpenVPN Remote Access Configuration Example Adding OpenVPN Remote Access Users Installing OpenVPN Remote Access Clients Configuring a Single Multi-Purpose OpenVPN Instance Authenticating OpenVPN Users with FreeRADIUS Authenticating OpenVPN Users with RADIUS via Active Directory Connecting to an OpenVPN Access Server Connecting OpenVPN Sites with Conflicting IP Subnets Routing Internet Traffic Through A Site-To-Site OpenVPN Tunnel Bridging OpenVPN Connections to Local Networks
OpenVPN Site-to-Site Configuration Example with SSL/TLS
OpenVPN Site-to-Site Configuration Example with Shared Key
OpenVPN Remote Access Configuration Example
Adding OpenVPN Remote Access Users
Installing OpenVPN Remote Access Clients
Configuring a Single Multi-Purpose OpenVPN Instance
Authenticating OpenVPN Users with FreeRADIUS
Authenticating OpenVPN Users with RADIUS via Active Directory
Connecting to an OpenVPN Access Server
Connecting OpenVPN Sites with Conflicting IP Subnets
Routing Internet Traffic Through A Site-To-Site OpenVPN Tunnel
Bridging OpenVPN Connections to Local Networks
WireGuard Remote Access VPN Configuration Example WireGuard Site-to-Site VPN Configuration Example WireGuard VPN Client Configuration Example
WireGuard Remote Access VPN Configuration Example
WireGuard Site-to-Site VPN Configuration Example
WireGuard VPN Client Configuration Example
A Brief Introduction to Web Proxies and Reporting: Squid, SquidGuard, and Lightsquid Authenticating Squid Package Users with FreeRADIUS Configuring the Squid Package as a Transparent HTTP Proxy Setting up WPAD Autoconfigure for the Squid Package
A Brief Introduction to Web Proxies and Reporting: Squid, SquidGuard, and Lightsquid
Authenticating Squid Package Users with FreeRADIUS
Configuring the Squid Package as a Transparent HTTP Proxy
Setting up WPAD Autoconfigure for the Squid Package
Virtualizing pfSense with VMware vSphere / ESXi Virtualizing pfSense with Hyper-V Virtualizing with Proxmox
Virtualizing pfSense with VMware vSphere / ESXi
Virtualizing pfSense with Hyper-V
Virtualizing with Proxmox