Agenda: pfSense-configure.htm

<h1 id="connecting-to-the-firewall"><a href="#connecting-to-the-firewall"><span class="header-section-number">1</span> Connecting to the firewall</a></h1>
<p>The firewall console is available using VNC. The following table gives the VNC ports:</p>
<pre><code>| Firewall        | Port |
| fw1.ws.nsrc.org | 10.10.0.241:71 |
| fw2.ws.nsrc.org | 10.10.0.241:72 |
| fw3.ws.nsrc.org | 10.10.0.241:73 |
| fw4.ws.nsrc.org | 10.10.0.241:74 |
| fw5.ws.nsrc.org | 10.10.0.241:75 |
| fw6.ws.nsrc.org | 10.10.0.241:76 |
| fw7.ws.nsrc.org | 10.10.0.241:77 |
| fw8.ws.nsrc.org | 10.10.0.241:78 |
| fw9.ws.nsrc.org | 10.10.0.241:79 |</code></pre>
<p>Use your vnc client to connect to the firewall for your group.</p>
<p>You should see something like this:</p>
<div class="figure">
<img src="fw9-1.png" alt="alt text" /><p class="caption">alt text</p>
</div>
<h1 id="setting-the-ip-addresses"><a href="#setting-the-ip-addresses"><span class="header-section-number">2</span> Setting the IP addresses</a></h1>
<p>You'll see that there are two lines in the middle of the screen which we need to configure to set the addresses for the WAN and the LAN.</p>
<pre><code>Choose Option 2) Set interface(s) IP address</code></pre>
<p>Then choose 1) to set the WAN address. Ignore the option to use DHCP and then set the IP address to:</p>
<pre><code>10.10.N.253</code></pre>
<p>Set the subnet mask to:</p>
<pre><code>24</code></pre>
<p>Set the WAN gateway address:</p>
<pre><code>10.10.N.254</code></pre>
<p>Ignore the IPv6 setup and don't revert to HTTP for configuration.</p>
<p>Now we'll set the LAN interface:</p>
<pre><code>Choose Option 2) Set interface(s) IP address</code></pre>
<p>Then choose 2) to set the LAN address. Set the IP address to:</p>
<pre><code>10.10.1N.254</code></pre>
<p>Set the subnet mask to:</p>
<pre><code>24</code></pre>
<p>Ignore the LAN gateway address and the IPv6 setup and don't revert to HTTP for configuration.</p>
<h1 id="confirming-that-things-are-set-up"><a href="#confirming-that-things-are-set-up"><span class="header-section-number">3</span> Confirming that things are set up</a></h1>
<div class="figure">
<img src="fw9-2.png" alt="alt text" /><p class="caption">alt text</p>
</div>
<p>Check that the addresses look correct.</p>
<h1 id="test-the-setup"><a href="#test-the-setup"><span class="header-section-number">4</span> Test the setup</a></h1>
<pre><code>Choose Option 7) Ping host</code></pre>
<p>and test to:</p>
<pre><code>10.10.N.254</code></pre>
<h1 id="turn-off-the-firewall-temporarily"><a href="#turn-off-the-firewall-temporarily"><span class="header-section-number">5</span> Turn off the firewall temporarily</a></h1>
<pre><code>Choose Option 8) Shell</code></pre>
<p>You should now see a prompt like:</p>
<pre><code>[2.1-Release][route@pfSense.localdomain]/root(1): </code></pre>
<p>Type the following commands:</p>
<pre><code>pfctl -d
route add default 10.10.N.254</code></pre>
<p>Normally you wouldn't need to do these commands as you'd access the firewall from the internal network.</p>
<h1 id="restart-the-webconfigurator"><a href="#restart-the-webconfigurator"><span class="header-section-number">6</span> Restart the webConfigurator</a></h1>
<pre><code>Choose Option 11) start webConfigurator</code></pre>
<h1 id="connect-to-the-web-interface"><a href="#connect-to-the-web-interface"><span class="header-section-number">7</span> Connect to the web interface</a></h1>
<pre><code>https://10.10.N.253</code></pre>
<p>Use the username: admin and password: pfsense</p>