{"id":18596,"date":"2020-03-18T15:06:04","date_gmt":"2020-03-18T15:06:04","guid":{"rendered":"https:\/\/made4it.com.br\/blog\/installation-of-pfsense-as-your-networks-gateway\/"},"modified":"2026-06-29T19:40:13","modified_gmt":"2026-06-29T19:40:13","slug":"installation-of-pfsense-as-your-networks-gateway","status":"publish","type":"post","link":"https:\/\/made4it.com.br\/en\/blog\/installation-of-pfsense-as-your-networks-gateway\/","title":{"rendered":"Installation of PFSense as your network’s Gateway."},"content":{"rendered":"\n

In this article we will cover the installation of the PFSense server in your network, so you can enjoy all the features that this platform has, ranging from Firewall and NATs, to Proxy and VPN, all in a lightweight and simple to configure server.<\/p>\n\n

Download Installer<\/h2>\n\n

The first step is to go to https:\/\/www.pfsense.org\/download\/ and select the architecture and mirror from which you\u2019ll download the files. For our purposes, we\u2019ll use the AMD64 architecture and the \u201cCD Image (ISO)\u201d installer to set it up as a standard VM. The mirror should be the one closest to your current location; if you\u2019re in Brazil, you can use the one in New York. <\/p>\n\n

\"\"
Select the Architecture, Installer, and Mirror as needed. We will work with the ISO Installer. <\/figcaption><\/figure>\n\n
\"\"The downloaded file will be in ‘.gz’ format, for compression purposes. We can use WinRAR or 7zip, or the compressor of your choice. When the download is complete, simply extract the file to obtain the compressed .ISO file.<\/figure>\n\n

Machine Settings<\/h2>\n\n

Let’s move on to creating the VM. At this point, the machine should be sized according to its architecture and the tasks it will perform. The more firewall\/NAT and proxy rules you have, the more resources you use, and the more machines PFsense will serve, the greater the resource requirements will be\u2014but in any case, it shouldn\u2019t be anything too resource-intensive.For our installation, I\u2019ll use a VM with 1 GB of RAM, 8 GB of disk space, and one processor core. <\/p>\n

It is important that the machine always has two network interfaces, one WAN and one LAN. The LAN interface, as the name implies, will connect to the internal network, communicating with your structure. The WAN interface, on the other hand, will communicate with the external network. <\/p>\n

This way, PFSense will serve as a Gateway for the internal structure, it can act as DNS, Proxy, Firewall, DHCP Server, and all the rest that it offers.<\/p>\n\n

Installation<\/h2>\n\n

After the VM is prepared, let’s start the PFSense Installation. To get started, simply make your machine boot using the ISO we downloaded. In case of a physical machine, just burn the ISO and insert it in the CD Drive, so we can boot it from the Installer. <\/p>\n\n

\"\"
First screen when booting the PFSense ISO.<\/figcaption><\/figure>\n\n

On the first screen, we can agree to the terms of Use, then select the ‘Install’ option.<\/p>\n\n

\"\"
It is important to agree with the terms for installation.<\/figcaption><\/figure>\n\n
\"\"
When you select the ‘Install’ option, PFSense will proceed with the installation.<\/figcaption><\/figure>\n\n

After this, a screen will appear for selecting the current keyboard format. Simply choose the option ‘Brazilian’ if your keyboard is ABNT-2, or ‘Continue’ if you have an American\/International keyboard, which are the most common formats. If you use another keyboard structure, just choose the option for your current format. <\/p>\n\n

\"\"
Select the Keyboard option you are currently using.<\/figcaption><\/figure>\n\n

Choosing the key mapping, we can do Disk Partitioning, in which case we can choose the ‘Auto (UFS)’ option, and the installer will automatically partition and install the System with the default settings.<\/p>\n\n

\"\"
The ‘Auto (UFS)’ option does all the work automatically, partitioning and installing the service.<\/figcaption><\/figure>\n\n

Once the installation is complete, we can either bring up the Shell to edit some manual one-off settings, or reboot the machine to get PfSense up and running correctly. I will just reboot the machine and configure after it is UP correctly. To do this, simply click ‘No’, and then ‘Reboot’. Remembering to remove the ISO after quitting the installer. <\/p>\n\n

\"\"
The ‘No’ option will restart the machine, to bring up the PFSense service.<\/figcaption><\/figure>\n\n
\"\"
Select the ‘reboot’ option for the services to be restarted.<\/figcaption><\/figure>\n\n

If you’ve done everything correctly, you’ll see a screen similar to this one:<\/p>\n\n

\"\"
PFSense Welcome Screen.<\/figcaption><\/figure>\n\n

If you want to change or assign the machine’s access IP, you can select the “2) Set interface(s) IP address” option in the CLI, then define which interface you will change.<\/p>\n

When entering the IP address, set the subnet mask (1 to 31), and finally, set the server’s gateway. If it is a LAN interface, simply press ‘Enter,’ since the gateway will only be used for the WAN. <\/p>\n

PFSense will ‘ask’ if you would like to use IPv6 on it, and set up a DHCP Server through it, so that other machines can automatically get IP from PFSense on the network.<\/p>\n\n

\"\"
IP configuration interface.<\/figcaption><\/figure>\n\n

WEB Configuration<\/h2>\n\n

With the installation part finished, we can move on to the basic settings in the WEB screen, called the WebGUI.<\/p>\n

If you can’t access the WEB part, but have pinged the machine, just select the “8) Shell” option and then run the command “easyrule pass wan tcp x.x.x.x y.y.y.y 443” <\/strong><\/em> (replacing x.x.x.x with your IP address and y.y.y.y with the subnet mask)<\/em> to allow the specified source IP address to access the web interface. If the previous command does not work, you can run “pfSsh.php playback enableallowallwan<\/strong><\/em>” command, which will allow ALL connections on the WAN port. <\/p>\n

It is important to access and configure the firewall blocking access right away, to avoid possible invasions on the server!<\/p>\n\n

Once you have access to the WEB screen, simply log in to PfSense with the default access, being user “admin” and password “pfsense”. <\/p>\n\n

\"\"
Default PFSense login screen. By default, access is with the user ‘admin’ and the password ‘pfsense’. <\/figcaption><\/figure>\n\n

As soon as you log in for the first time, a setup wizard will help you configure the server.<\/p>\n

First, just give <Next> to agree with the information. When you get to the General Configuration screen, simply fill in the relevant data for your server (Hostname, Domain, DNS Servers). <\/p>\n\n

\"\"
The Wizard’s initial screen. Some information about Netgate and its Support. <\/figcaption><\/figure>\n\n
\"\"
Screen 2 of 9. On this screen we set up some general information for the server, such as Hostname and DNS. <\/figcaption><\/figure>\n\n

Then select the Time and Timezone NTP server. It is important that the time is correct, because PFSense works with some Scheduling options, as well as keeping the correct time makes it easier to view logs and analyze data with Timestamp. <\/p>\n\n

\"\"
Screen 3 of 9. In this part we configure the NTP of the server, to keep the correct time. <\/figcaption><\/figure>\n\n

In step 4\/9 we have the network settings.<\/p>\n

Again, just fill in according to your current scenario. At the end of this step you have two very important options: <\/p>\n

    \n
  • Block RFC 1918 Private Networks<\/strong>: This option will block access from RFC 1918 private IP addresses on the WAN interface. As a result, only the LAN will be accessible to private IP addresses. <\/li>\n
  • Block bogon networks<\/strong>: This option will block bogon traffic on the WAN interface. Bogons, in short, are reserved IP addresses that do not fall under RFC 1918, as well as IP addresses not allocated by regulatory bodies. <\/li>\n<\/ul>\n

    Regardless of these options, it is always a good idea to filter the WAN interface to block IP addresses you do not recognize, in order to prevent attacks and intrusions into your infrastructure.<\/p>\n\n

    \"\"
    Screen 4 of 9. Some important network options. It is recommended to mark both, to have greater security. <\/figcaption><\/figure>\n\n

    In step 5\/9 we have the LAN interface configuration, in case you want to make any changes. By default, this interface acts as ‘Gateway’. <\/p>\n\n

    \"\"
    5 of 9 screen. IP configuration on the LAN interface, if you wish to change it. <\/figcaption><\/figure>\n\n

    For step 6 of 9, we\u2019ll change the password for the ‘admin’ user. We strongly recommend changing it, as the default password creates a vulnerability for the server and your entire infrastructure.Next, the ‘Wizard’ will apply the changes and complete the process. Simply click ‘Finish’. <\/p>\n\n

    \"\"
    Screen 6 of 9. Changing the Administrator password is always good practice. <\/figcaption><\/figure>\n\n
    \"\"
    Screen 7 of 9. Just click ‘Reload’ to apply the changes. <\/figcaption><\/figure>\n\n
    \"\"
    Screen 8 of 9. Information that your settings are being saved. <\/figcaption><\/figure>\n\n
    \"\"
    9 of 9 screen. All set! <\/figcaption><\/figure>\n\n

    At the end of the Wizard, we have our PFSense ready to use!<\/p>\n

    In upcoming posts. We will teach you how to create a VPN using PFSense, so you can access your Internal Network from your home. Thank you and see you in the next posts.Adriano Elias de SouzaIT ConsultantMade4it<\/p>\n\n

    \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

    At the end of the Wizard, we have our PFSense ready to use! In upcoming posts. We will teach you how to create a VPN using PFSense, so you can access your Internal Network from your home. Thank you and see you in the next posts. Adriano Elias de SouzaIT ConsultantMade4it<\/p>\n","protected":false},"author":5,"featured_media":18598,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[869,1041,1042],"tags":[1045,1047,1048,1044,1046,1043],"class_list":["post-18596","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network","category-pfsense","category-servers","tag-how-to-install-pfsense","tag-install-pfsense","tag-pfsense","tag-pfsense-basics","tag-pfsense-installation","tag-servers"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t