book

pfSense 2 Cookbook

Name: pfSense 2 Cookbook
Author: Matt Williamson
ISBN: 9781849514866

by Matt Williamson

March 2011

Intermediate to advanced

252 pages

4h 24m

English

Packt Publishing

Read now

Unlock full access

pfSense 2 Cookbook
Table of Contents
pfSense 2 Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers and moreWhy Subscribe?Free Access for Packt account holdersInstant Updates on New Packt Books
Preface
What this book covers
What you need for this book
Who this book is for

Conventions
Reader feedback
Customer support
ErrataPiracyQuestions
1. Initial Configuration
Introduction
Applying basic settings in General Setup
Getting readyHow to do it...See also
Identifying and assigning interfaces
Getting readyHow to do it...How it works...There's more...See also
Configuring the WAN interface
Getting readyHow to do it...How it works...There's more...See also
Configuring the LAN interface
Getting readyHow to do it...How it works...There's more...See also
Configuring optional interfaces
Getting readyHow to do it...How it works...There's more...See also
Enabling the Secure Shell (SSH)
Getting readyHow to do it...How it works...There's more...See also
Generating authorized RSA keys
Getting readyHow to do it...How it works...There's more...See also
Configuring SSH RSA key authentication
Getting readyHow to do it...How it works...There's more...See also
Accessing the Secure Shell (SSH)
Getting readyHow to do it...How it works...See also
2. Essential Services
Introduction
Configuring the DHCP server
Getting readyHow to do it...How it works...There’s more...Deny Unknown ClientsDNS ServersGatewayDomain NameDefault Lease TimeMaximum Lease TimeFailover Peer IPStatic ARPDynamic DNSAdditional BOOTP/DHCP OptionsSee also
Creating static DHCP mappings
Getting readyHow to do it...How it works...There’s more...See also
Configuring the DHCP relay
Getting readyHow to do it...How it works...Append Circuit ID and Agent ID to RequestsRelay requests to the WAN DHCP serverSee also
Specifying alternate DNS servers
Getting readyHow to do it...How it works...Using the DNS ForwarderUsing your WAN DNS serversSee also
Configuring the DNS Forwarder
Getting readyHow to do it...How it works...See also
Configuring a standalone DHCP/DNS server
How to do it...How it works...Register DHCP Leases in DNS ForwarderSee also
Configuring dynamic DNS
Getting readyHow to do it...How it works...Pre-configured service types (dynamic DNS providers)Specifying an alternative service using RFC 2136
3. General Configuration
Introduction
Creating an alias
How to do it...How it works...There's more...Host aliasNetwork aliasPort aliasOpenVPN Users aliasURL aliasURL Table aliasUsing an aliasEditing an aliasDeleting an alias:Bulk-importing aliasesSee also
Creating a NAT port forward rule
Getting readyHow to do it...How it works...There's more...Port redirectionSee also
Creating a firewall rule
Getting readyHow to do it...How it works...There's more...We rarely know the source port!Ordering firewall rulesDuplicating a firewall ruleAdvanced featuresSee also
Creating a schedule
Getting readyHow to do it...How it works...There's more...Selecting days or days of the weekSee also
Remote desktop access, a complete example
Getting readyHow to do it...How it works...There's more...See also
4. Virtual Private Networking
Introduction
Creating an IPsec VPN tunnel
Getting readyHow to do it...How it works...See also
Configuring the L2TP VPN service
Getting readyHow to do it...How it works...Connecting from a Windows 7 clientSee alsoConfiguring the OpenVPN serviceHow to do it...How it works...Encryption algorithmsOpenVPN Client ExportSee alsoConfiguring the PPTP VPN serviceHow to do it...How it works...Connecting from a Windows 7 clientConnecting from a Ubuntu 10.10 clientConnect from an Apple Mac OSx ClientSee also
5. Advanced Configuration
Introduction
Creating a virtual IP
Getting readyHow to do it...How it works...There's more...Configuring a CARP virtual IP addressConfiguring a Proxy ARP virtual IP addressConfiguring an IP alias virtual IP addressSee also
Configuring a 1:1 NAT rule
How to do it...How it works...There's more...See also
Creating an outbound NAT rule
Getting readyHow to do it...How it works...See also
Creating a gateway
Getting readyHow to do it...How it works...There's more...Gateway GroupsSee also
Creating a static route
Getting readyHow to do it...How it works...See also
Configuring traffic-shaping (QoS, Quality of Service)
Getting readyHow to do it...How it works...
Bridging interfaces
How to do it...How it works...There's more...See also
Creating a virtual LAN
Getting readyHow to do it...How it works...See also
Creating a captive portal
Getting readyHow to do it...How it works...There's more...
6. Redundancy, Load Balancing, and Failover
Introduction
Configuring multiple WAN interfaces
Getting readyHow to do it...How it works...There's more...See also
Configuring multi-WAN load balancing
Getting readyHow to do it...How it works...There's more...See also
Configuring multi-WAN failover
Getting readyHow to do it...How it works...There's more...See also
Configuring a web server load balancer
Getting readyHow to do it...How it works...There's moreSee also
Configuring a web server failover
Getting readyHow to do it...How it works...See also
Configuring CARP firewall failover
Getting readyHow to do it...How it works...See also
7. Services and Maintenance
Introduction
Enabling OLSR
How to do it...How it works...There's more...
Enabling PPPoE
How to do it...How it works...
Enabling RIP
How to do it...How it works...
Enabling SNMP
How to do it...How it works...There's more...See also
Enabling UPnP and NAT-PMP
How to do it...How it works...There's more...Security warningSee also
Enabling OpenNTPD
How to do it...How it works...See also
Enabling Wake On LAN (WOL)
How to do it...How it works...There's more...Wake AllSee also
Enabling external logging (syslog server)
Getting readyHow to do it...How it works...There's more...See also
Using ping
How to do it...How it works...See also
Using traceroute
How to do it...How it works...See also
Backing up the configuration file
Getting ready...How to do it...How it works...There's more...Backup areasSee also
Restoring the configuration file
Getting ready...How to do it...How it works...There's more...Restore areasSee also
Configuring automatic configuration file backup
Getting readyHow to do it...How it works...There's more...See also
Updating pfSense firmware
Getting readyHow to do it...How it works...There's more...Upgrade in progressSystem Dashboard shortcutSee also
A. Monitoring and Logging
Introduction
Customizing the Status Dashboard
How to do it...How it works...There's more...
Monitoring current traffic
How to do it...How it works...See also
Configuring SMTP e-mail notifications
Getting readyHow to do it...How it works...There's more...
Viewing system logs
How to do it...How it works...There's more...Firewall log: Normal ViewFirewall log: Dynamic ViewFirewall log: Summary ViewSee also
Configuring an external syslog server
Getting readyHow to do it...How it works...Running a syslog service in Linux/Mac OSRunning a syslog service in WindowsSee also
Viewing RRD graphs
How to do it...How it works...SystemTrafficPacketsQualityVPNCustomSee also
Viewing DHCP leases
How to do it...How it works...Adding a static DHCP mappingSending a wake on LAN mappingSee also
Managing services
How to do it...How it works...See also
Monitoring the packet filter with pfInfo
How to do it...How it works...See also
Monitoring traffic with pfTop
How to do it...How it works...See also
Monitoring system activity
How to do it...How it works...See also
B. Determining our Hardware Requirements
Introduction
Determining our deployment scenario
Getting readyHow to do it...How it works...There’s more...
Determining our throughput requirements
Getting readyHow to do it...How it works...There’s more...List of available packagesSee also
Determining our interface requirements
Getting readyHow to do it...How it works...There’s more...pfSense 2.0: Minimum interface requirements
Choosing a standard or embedded Image
Getting readyHow to do it...How it works...There’s more...See also
Choosing a Form Factor
Getting readyHow to do it…How it works...There’s more...Installing the embedded platform on a desktop/server/laptopInstalling the standard platform on an applianceSee also
Index

Content preview from pfSense 2 Cookbook

Monitoring current traffic

This recipe describes how to monitor current incoming and outgoing traffic in pfSense.

How to do it...

Browse to Status | Traffic Graph.
Select an Interface to monitor.

How it works...

The traffic graph shows real-time information of all traffic flowing to and from a particular interface. The table to the right will show the traffic information for the top few devices on the network.