Difference between revisions of "NetMan - pfSense"
Jump to navigation
Jump to search
(Created page with "= Download pfSense = [https://www.pfsense.org/ Where to get it] File:Screenshot from 2020-06-08 14-31-42.png|256px|Screenshot from 2020-06-08 14-31-42.png|alt="Aaarrrggg!"|...") |
|||
| Line 1: | Line 1: | ||
| − | = Download pfSense = | + | =Download pfSense= |
[https://www.pfsense.org/ Where to get it] | [https://www.pfsense.org/ Where to get it] | ||
[[File:Screenshot from 2020-06-08 14-31-42.png|256px|Screenshot from 2020-06-08 14-31-42.png|alt="Aaarrrggg!"|right]] | [[File:Screenshot from 2020-06-08 14-31-42.png|256px|Screenshot from 2020-06-08 14-31-42.png|alt="Aaarrrggg!"|right]] | ||
| − | + | <br /> | |
| − | == Stuff it onto a thumbdrive == | + | ==Stuff it onto a thumbdrive== |
(really should create command-line instructions for this part) | (really should create command-line instructions for this part) | ||
| Line 16: | Line 16: | ||
If you're playing with a Mac... Yer on yer own for now. | If you're playing with a Mac... Yer on yer own for now. | ||
| − | = Configure the Hardware = | + | =Configure the Hardware= |
You'll want either a dual NIC or 2 (or more...) NICs. | You'll want either a dual NIC or 2 (or more...) NICs. | ||
| Line 22: | Line 22: | ||
A hard drive (or SSD) could come in rather handy... | A hard drive (or SSD) could come in rather handy... | ||
| − | = Install pfSense = | + | =Install pfSense= |
| − | * Boot your machine from the thumbdrive. (UEFI is just fine...) | + | *Boot your machine from the thumbdrive. (UEFI is just fine...) |
| − | * Accept the copyright. | + | *Accept the copyright. |
| − | * Select "Install" | + | *Select "Install" |
| − | * Select "Continue with default keymap" (or, really, any keymap you like...) | + | *Select "Continue with default keymap" (or, really, any keymap you like...) |
| − | * Select "Auto (UFS) | + | *Select "Auto (UFS) |
| − | * Choose your disk for the install | + | *Choose your disk for the install |
| − | ** I'd suggest only having one disk in the machine... | + | **I'd suggest only having one disk in the machine... |
| − | * Select "Entire Disk | + | *Select "Entire Disk |
| − | ** Yes... Proceed. | + | **Yes... Proceed. |
| − | * Select GPT (GUID Partition Table) | + | *Select GPT (GUID Partition Table) |
| − | * Hit "Finish" | + | *Hit "Finish" |
| − | * Hit "Commit" | + | *Hit "Commit" |
| − | * Watch the pretty progress screens... (Or ignore it until it's done... Your choice...) | + | *Watch the pretty progress screens... (Or ignore it until it's done... Your choice...) |
| − | * When you see the "Manual Configuration" screen, Hit "No" | + | *When you see the "Manual Configuration" screen, Hit "No" |
| − | * Hit "Reboot" | + | *Hit "Reboot" |
| − | * Go back & configure the machine to actually boot from the drive you installed pfSense onto... | + | *Go back & configure the machine to actually boot from the drive you installed pfSense onto... |
| − | = Initial Configuration of pfSense = | + | =Initial Configuration of pfSense= |
On first boot, pfSense will ask "Should VLANs be set up now [y|n]?" | On first boot, pfSense will ask "Should VLANs be set up now [y|n]?" | ||
| Line 47: | Line 47: | ||
Don't bother... | Don't bother... | ||
| − | * Select your WAN interface | + | *Select your WAN interface |
| − | ** bce0 on this test machine (T310) | + | **bce0 on this test machine (T310) |
| − | * Select your LAN interface | + | *Select your LAN interface |
| − | ** bce1 on this test machine (T310) | + | **bce1 on this test machine (T310) |
| − | * Verify they're selected properly & say yes. | + | *Verify they're selected properly & say yes. |
| − | * Watch all the "done" messages scroll by (or not... again, your choice...) | + | *Watch all the "done" messages scroll by (or not... again, your choice...) |
After a moment or 3, you'll see the console menu. | After a moment or 3, you'll see the console menu. | ||
| Line 74: | Line 74: | ||
'''It's ALIVE!!!''' | '''It's ALIVE!!!''' | ||
| − | = Configuring pfSense from here... = | + | =Configuring pfSense from here...= |
At this point, you should be able to connect to the LAN port & point a web browser at 192.168.1.1 | At this point, you should be able to connect to the LAN port & point a web browser at 192.168.1.1 | ||
| Line 80: | Line 80: | ||
Default login is: | Default login is: | ||
| − | * Username: admin | + | |
| − | * Password: pfsense | + | *Username: admin |
| + | *Password: pfsense | ||
| + | |||
Change this. Do it NOW! | Change this. Do it NOW! | ||
| Line 88: | Line 90: | ||
[[pfSense - Menu Structure|Menu Structure]] | [[pfSense - Menu Structure|Menu Structure]] | ||
| − | = Troubleshooting & Repair = | + | =Troubleshooting & Repair= |
| − | == Clearing the DNS Forwarder Cache == | + | ==Clearing the DNS Forwarder Cache== |
[https://docs.netgate.com/pfsense/en/latest/dns/clearing-the-dns-forwarder-cache.html Source] | [https://docs.netgate.com/pfsense/en/latest/dns/clearing-the-dns-forwarder-cache.html Source] | ||
| Line 103: | Line 105: | ||
Restarting the daemon will clear the internal cache, but the client PCs may still have cached entries. | Restarting the daemon will clear the internal cache, but the client PCs may still have cached entries. | ||
| − | == Flushing the ARP Cache == | + | ==Flushing the ARP Cache== |
Click '''Diagnostics / Command Prompt''' | Click '''Diagnostics / Command Prompt''' | ||
<code>arp -d -a</code> | <code>arp -d -a</code> | ||
| − | = Notes & Tips = | + | =Notes & Tips= |
| − | * If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. | + | |
| + | *If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP. | ||
Revision as of 14:26, 10 June 2020
Contents
Download pfSense
Stuff it onto a thumbdrive
(really should create command-line instructions for this part)
If working from a Linux Mint machine GUI, right-click & extract the .gz file. Then right-click the resulting .img file & select "Make bootable USB stick".
If working from one of those crappy Windows machines, use Rufus...
If you're playing with a Mac... Yer on yer own for now.
Configure the Hardware
You'll want either a dual NIC or 2 (or more...) NICs.
A hard drive (or SSD) could come in rather handy...
Install pfSense
- Boot your machine from the thumbdrive. (UEFI is just fine...)
- Accept the copyright.
- Select "Install"
- Select "Continue with default keymap" (or, really, any keymap you like...)
- Select "Auto (UFS)
- Choose your disk for the install
- I'd suggest only having one disk in the machine...
- Select "Entire Disk
- Yes... Proceed.
- Select GPT (GUID Partition Table)
- Hit "Finish"
- Hit "Commit"
- Watch the pretty progress screens... (Or ignore it until it's done... Your choice...)
- When you see the "Manual Configuration" screen, Hit "No"
- Hit "Reboot"
- Go back & configure the machine to actually boot from the drive you installed pfSense onto...
Initial Configuration of pfSense
On first boot, pfSense will ask "Should VLANs be set up now [y|n]?"
Don't bother...
- Select your WAN interface
- bce0 on this test machine (T310)
- Select your LAN interface
- bce1 on this test machine (T310)
- Verify they're selected properly & say yes.
- Watch all the "done" messages scroll by (or not... again, your choice...)
After a moment or 3, you'll see the console menu.
*** Welcome to pfSense 2.4.5-RELEASE (amd64) on pfSense *** WAN (wan) -> bce0 -> v4/DHCP4: 192.168.0.26/24 LAN (lan) -> bce1 -> v4: 192.168.1.1/24 0) Logout (SSH only) 9) pfTop 1) Assign Interfaces 10) Filter Logs 2) Set interface(s) IP address 11) Restart webConfigurator 3) Reset webConfigurator password 12) PHP shell + pfSense tools 4) Reset to factory defaults 13) Update from console 5) Reboot system 14) Enable Secure Shell (sshd) 6) Halt system 15) Restore recent configuration 7) Ping Host 16) Restart PHP-FPM 8) Shell Enter an option:
It's ALIVE!!!
Configuring pfSense from here...
At this point, you should be able to connect to the LAN port & point a web browser at 192.168.1.1
This is the Web-UI...
Default login is:
- Username: admin
- Password: pfsense
Change this. Do it NOW!
If you have the WAN port connected to the Internet, you should actually be capable of accessing the outside world right now.
Troubleshooting & Repair
Clearing the DNS Forwarder Cache
To clear the DNS Forwarder cache, restart the dnsmasq daemon as follows:
Click Status / Services
Find dnsmasq in the list
Click 
, or stop the service using 
then start again with 
.
Restarting the daemon will clear the internal cache, but the client PCs may still have cached entries.
Flushing the ARP Cache
Click Diagnostics / Command Prompt
arp -d -a
Notes & Tips
- If you want to be able to ping your network from the outside, Go into Firewall / Rules / WAN & create a rule to allow ICMP.
