{"id":8518,"date":"2013-08-16T14:50:00","date_gmt":"2013-08-16T19:50:00","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=8518"},"modified":"2014-03-18T21:45:42","modified_gmt":"2014-03-19T02:45:42","slug":"install-pfsense-firewall-router-inside-a-home-network","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=8518","title":{"rendered":"Install pfSense Firewall Router Inside a Home Network"},"content":{"rendered":"
\n

Contents<\/h2>\n
    \n\t
  1. \n\t\tOverview<\/a>\n\t<\/li>\n\t
  2. \n\t\tInstall pfSense VMware Virtual Machine<\/a>\n\t\t
      \n\t\t\t
    1. \n\t\t\t\tDownload ova File<\/a>\n\t\t\t<\/li>\n\t\t\t
    2. \n\t\t\t\tDeploy Virtual Machine<\/a>\n\t\t\t<\/li>\n\t\t\t
    3. \n\t\t\t\tpfSense default configuration<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
    4. \n\t\tInitial Machine Setup<\/a>\n\t\t
        \n\t\t\t
      1. \n\t\t\t\tConfigure WAN<\/a>\n\t\t\t<\/li>\n\t\t\t
      2. \n\t\t\t\tConfigure LAN<\/a>\n\t\t\t<\/li>\n\t\t\t
      3. \n\t\t\t\tReboot<\/a>\n\t\t\t<\/li>\n\t\t<\/ol>\n\t
      4. \n\t\tInitial Web Setup<\/a>\n\t<\/li>\n\t
      5. \n\t\tReferences<\/a>\n\t<\/li>\n<\/ol>\n<\/ol>\n<\/div>\n
         <\/div>\n

        Overview<\/h2><\/span>\n

        * See http:\/\/www.pfsense.org\/<\/a><\/p>\n

        Install pfSense VMware Virtual Machine<\/h2><\/span>\n

        Download ova File<\/h3><\/span>\n

        * Download ova file from here<\/a>, e.g. pfSense-2.0.3-RELEASE-amd64.ova<\/a><\/p>\n

        Deploy Virtual Machine<\/h3><\/span>\n

        * Deploy to: ESXi 5<\/em>
        \n– Name: pfsense01<\/em>
        \n– CPUs: 1<\/em>
        \n– Memory: 512 MB<\/em> (could be 256 MB)<\/p>\n

        pfSense default configuration<\/h3><\/span>\n

        By default pfSense will have the following configuration:
        \n* WAN is configured as DHCP client, all incoming connections are blocked by default.
        \n* LAN is configured at 192.168.1.1\/24<\/em> and acts as DHCP-Server and offers a DNS-forwarder.
        \n* OPTx interfaces are disabled, you have to enable and configure them at the webgui.
        \n* WebGUI runs at port 80, username is “admin<\/em>“, password “pfsense<\/em>“.
        \n* SSH is disabled. <\/p>\n

        Initial Machine Setup<\/h2><\/span>\n

        * Bootup VM<\/p>\n

        Configure WAN<\/h3><\/span>\n

        * Enter an option: 2<\/strong>
        \n* Enter the number of the interface you with to configure: 1<\/strong>
        \n* Configure WAN interface via DHCP? [y|n]: n<\/strong>
        \n* Enter the new WAN IPv4 address: 192.168.1.60<\/strong>
        \n* Enter the new WAN IPv4 subnet bit count: 24<\/strong>
        \n* Do you want to revert to HTTP as the webConfigurator protocol? (y\/n): n<\/strong><\/p>\n

        \"\"<\/a><\/h6><\/span>\n
        \"\"<\/a><\/h6><\/span>\n

        Configure LAN<\/h3><\/span>\n

        * Enter an option: 2<\/strong>
        \n* Enter the number of the interface you with to configure: 2<\/strong>
        \n* Enter the new LAN IPv4 address: 192.168.2.1<\/strong>
        \n* Enter the new LAN IPv4 subnet bit count: 24<\/strong>
        \n* Do you want to enable the DHCP server on LAN? [y|n]: y<\/strong>
        \n* Enter the start address: 192.168.2.2<\/strong>
        \n* Enter the end address: 192.168.2.20<\/strong><\/p>\n

        \"\"<\/a><\/h6><\/span>\n
        \"\"<\/a><\/h6><\/span>\n

        Reboot<\/h3><\/span>\n

        * Select option 5 to reboot server.<\/p>\n

        \"\"<\/a><\/h6><\/span>\n
        \"\"<\/a><\/h6><\/span>\n

        Initial Web Setup<\/h2><\/span>\n

        * Setup a client machine using 192.168.2.1<\/em> as both gateway and DHCP server.
        \n* From client machine, login         https:\/\/192.168.2.1<\/a> as admin\/pfsense<\/strong><\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Enter
        \n– Hostname: pfsense01
        \n– Domain: pfsense.local
        \n– Primary DNS Server: 8.8.8.8<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Setup NTP:
        \n– Time server hostname: 0.pfsense.pool.ntp.org
        \n– Timezone: America\/New_York<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Setup WAN:
        \n– IP Address: 192.168.1.60\/24
        \n– Gateway: 192.168.1.1<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        – Since this is a home private network, unblock RFC1918 private networks:<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Setup LAN:
        \n– LAN IP Address: 192.168.2.1
        \n– Subnet Mask: 24<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Enter LAN admin console password:<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        * Reload configuration:<\/p>\n

        \"\"<\/a><\/h6><\/span>\n
        \"\"<\/a><\/h6><\/span>\n

        * Dashboard:<\/p>\n

        \"\"<\/a><\/h6><\/span>\n

        References<\/h2><\/span>\n

        * pfSense<\/a>
        \n*         Installing pfSense<\/a>
        \n*         vCloud Director Howto: Load balancing with free pfSense<\/a>
        \n*         Install and Configure pfSense in Your Home Network<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

        Overview * See http:\/\/www.pfsense.org\/ Install pfSense VMware Virtual Machine Download ova File * Download ova file from here, e.g. pfSense-2.0.3-RELEASE-amd64.ova Deploy Virtual Machine * Deploy to: ESXi 5 – Name: pfsense01 – CPUs: 1 – Memory: 512 MB (could be … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[229],"tags":[614,141,424,425],"class_list":["post-8518","post","type-post","status-publish","format-standard","hentry","category-firewall","tag-firewall","tag-install","tag-pfsense","tag-router"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-2do","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/8518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8518"}],"version-history":[{"count":5,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/8518\/revisions"}],"predecessor-version":[{"id":9854,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/8518\/revisions\/9854"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}