pfSense® software Configuration Recipes

The recipes in this section walk administrators through configuring various aspects of pfSense software.

General

• Basic Firewall Configuration Example

• Blocking Web Sites

• Using an External Wireless Access Point

• Using Software from FreeBSD

• Using NAT and FTP without a Proxy

• Configuring pfSense Software for Online Gaming

• Migrating an Assigned LAN to LAGG

• Accessing a CPE/Modem from Inside the Firewall

• Exporting NetFlow with softflowd

• Configuring Switches with VLANs

• Using the Shaper Wizard to Configure ALTQ Traffic Shaping

• Configuring CoDel Limiters for Bufferbloat

• Copy Files to a USB Drive

• Diagnostic Data for Support

• Changing Credentials and Keys

• WAN Connectivity with 802.1X Authentication Bridging and VLAN 0 PCP Tagging

DNS

• Configuring DNS over TLS

• Configuring BIND as an RFC 2136 Dynamic DNS Server

• Blocking External Client DNS Queries

• Redirecting Client DNS Requests

Authentication

• Accessing the Firewall Filesystem with SCP

• Granting Users Access to SSH

• External User Authentication Examples

• Authenticating Users with Google Cloud Identity

• Using EAP and PEAP with FreeRADIUS

• Using Mobile One-Time Passwords with FreeRADIUS

• Authenticating from Active Directory using RADIUS/NPS

Firewall/NAT

• Allowing Remote Access to the GUI

• Preventing RFC 1918 Traffic from Exiting a WAN Interface

• Accessing Port Forwards from Local Networks

• Configuring NAT for a VoIP PBX

• Configuring NAT for VoIP Phones

• Configuring NAT64 for IPv6-only Clients

Routing

• Dynamic Routing Protocol Basics

• Configuring IPv6 Through A Tunnel Broker Service

• Configuring Multi-WAN for IPv6

• Routing Public IP Addresses

High Availability

• High Availability Configuration Example

• Converting High Availability DHCP from ISC to Kea

• High Availability Configuration Example with Multi-WAN

• High Availability Configuration Example without NAT

IPsec

• IPsec Site-to-Site VPN Example with Pre-Shared Keys

• IPsec Site-to-Site VPN Example with Certificate Authentication

• IPsec Remote Access VPN Example Using IKEv2 with EAP-MSCHAPv2

• IPsec Remote Access VPN Example Using IKEv2 with EAP-RADIUS

• IPsec Remote Access VPN Example Using IKEv2 with EAP-TLS

• Configuring IPsec IKEv2 Remote Access VPN Clients

• IPsec Remote Access VPN Example Using IKEv1 with Xauth

• IPsec Remote Access VPN Example Using IKEv1 with Pre-Shared Keys

• Routing Internet Traffic Through a Site-to-Site IPsec Tunnel

L2TP/IPsec

• L2TP/IPsec Remote Access VPN Configuration Example

• Connecting to L2TP/IPsec from Android

OpenVPN

• OpenVPN Site-to-Site Configuration Example with SSL/TLS

• OpenVPN Site-to-Site Configuration Example with SSL/TLS and DCO

• OpenVPN Site-to-Site Configuration Example with Shared Key

• OpenVPN Remote Access Configuration Example

• Adding OpenVPN Remote Access Users

• Installing OpenVPN Remote Access Clients

• Authenticating OpenVPN Users with FreeRADIUS

• Authenticating OpenVPN Users with RADIUS via Active Directory

• Connecting OpenVPN Sites with Conflicting IP Subnets

• Routing Internet Traffic Through A Site-To-Site OpenVPN Tunnel

• Bridging OpenVPN Connections to Local Networks

• OpenVPN Site-to-Site with Multi-WAN and OSPF

WireGuard

• WireGuard Remote Access VPN Configuration Example

• WireGuard Site-to-Site VPN Configuration Example

• WireGuard Site-to-Multisite VPN Configuration Example

• WireGuard VPN Client Configuration Example

Virtualization

• Virtualizing pfSense Software with VMware vSphere / ESXi

• Virtualizing pfSense Software with Hyper-V

• Virtualizing with Proxmox® VE