Changes between Version 1 and Version 2 of noc2018/agenda/PfsenseBasics


Ignore:
Timestamp:
Nov 30, 2018, 7:08:09 AM (5 years ago)
Author:
admin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • noc2018/agenda/PfsenseBasics

    v1 v2  
    3838 - Make sure virtual hard disk file name in following format
    3939
    40  '''pfsense.'your domain'.ac.lk'''
     40 '''pfsense.instXY.ac.lk'''
    4141
    4242 - adjust the disk size to '''10.0GB''' and click on '''Create''' to create the VM
     
    134134 - To change the WAN interface IP Address press '''2''' and '''enter'''.
    135135
    136  - Enter the LAN Ip address as ''' 10.1.1.254'''. Enter subnet mas as '''24'''. We are going to have this IP address as our LAN's gateway IP. Do not give any parameters to gateway on LAN. Just press enter.
     136 - Enter the LAN Ip address as ''' 10.XY.1.254'''. Enter subnet mask as '''24'''. We are going to have this IP address as our LAN's gateway IP. Do not give any parameters to gateway on LAN. Just press enter.
    137137
    138138 - We are not going to have an IPv6 address for LAN. So just Press enter.
     
    140140 - To enable DHCP server on LAN press '''y''' and press enter
    141141
    142  - For this workshop our LAN DHCP range is 10.1.1.10 to 10.1.1.50. Give start and end IP addresses in next steps.
     142 - For this workshop our LAN DHCP range is 10.XY.1.10 to 10.XY.1.50. Give start and end IP addresses in next steps.
    143143
    144144 - Press '''n''' and '''enter''' to disable http on WAN interface
    145145
    146  - You will be promted back to main interface.
     146 - You will be promt back to main interface.
    147147
    148148You have now set up both WAN and LAN IP addresses.
     
    155155
    156156
    157 
    158 
    159 
     157== WebUI and Basic Configurations ==
     158
     159pfSense by default allows you to do the configuration through its web user interface. Initially, LAN segment hosts are allowed to login and therefore you need to have a device connected to its LAN. On our lab setup we will simulate the Local Area Network with two vm's GUI vm and a server vm.
     160
     161Download the pre built GUI vm from here and the server vm from here.
     162
     163Import them in to Oracle virtual box from File Import Appliance
     164
     165While importing make sure to Tick '''Reinitialize the MAC address''' of all your network cards.
     166
     167Our lab network will be,
     168
     169{{{
     170     LAN or WiFi of Your Host Machine  - - > Bridge Port -- - >ETH0 -- pfsense
     171                                                                          |
     172                                                                         ETH1
     173                                                                          |
     174                                                                 Virtual Box 'intnet' - -> two other vm's
     175}}}
     176
     177Please double check your vm network connections before powering on them. If all settings are satisfying, power on both Virtual Machines.
     178
     179
     180From your GUI vm browse to !http://<pfSense-LAN-address>
     181
     182Default admin / pass are admin / pfsense
     183
     184The first visit to the WebGUI will be redirected to the setup wizard, which is also accessible at System > Setup Wizard. Proceed through the wizard as follows:
     185
     186- Step 1: Next
     187- Step 2:
     188   - Hostname pfsense.instXY.ac.lk
     189   - Domain:
     190   - Primary DNS Server:  192.248.1.161
     191   - Secondary DNS Server:  192.248.1.161
     192   - unset Overide DNS option
     193- Step 3:
     194   - Time Server hostname: 192.248.1.161
     195   - Timezone: !Asia/Colombo
     196- Step 4: Next
     197- Step 5: Next
     198- Step 6: Change admin password to the class password given for the lab
     199- Step 7: Reload
     200- Finish
     201- Accept
     202
     203After that you will be directed to the Dashboard.
     204
     205=== Dashboard ===
     206
     207The pfSense dashboard is the main page of the firewall, and it makes monitoring various aspects of the system easy. Returning to the dashboard can be accomplished by clicking the logo in the upper left, or by navigating to Status > Dashboard.
     208
     209The Dashboard is composed of Widgets, each of which display information about a different area of the firewall including,
     210
     211
     212- Firewall Logs
     213- Gateways
     214- Interface Statistics
     215- RSS Feed
     216- Services Status
     217- System Information
     218- Thermal Sensors
     219- Traffic Graphs
     220- Wake on LAN
     221
     222A widget can be added to the dashboard by clicking '''+''' at the top of the screen, then choosing the widget from the list. Once the widget appears, its placement may be changed by dragging its title bar to another location on the screen. The widget will snap into place in one of two columns, and can be reordered as desired.
     223
     224Click '''Save Settings''' at the top of the screen after making any widget layout changes.
     225
     226Some widgets will have their own settings, which may be accessed by pressing the '''wrench icon''' in their title bar. To save these settings use the '''Save''' button inside the widget, not the button at the top of the page.
     227
     228=== General Setup ===
     229
     230
     231Some basic/common settings are available under System > General Setup. Some useful settings are,
     232
     233- Hostname: The name by which this pfSense router is known. Should only include the portion before the first “.”.
     234- Domain: The domain name in which this pfSense is used. Together with the hostname, this will form the Fully Qualified Domain Name (FQDN) of the firewall.
     235- DNS Servers:
     236>The gateway selection for DNS servers is primarily used for Using Multiple IPv4 WAN Connections.
     237- Time Zone:
     238- NTP Time Server:
     239- Language: The language to use for the GUI. Default is English
     240- Theme: Changes the look and feel of the pfSense GUI, but not the functionality
     241
     242
     243
     244
     245
     246
     247