pfSense 2 Cookbook电子书

pfSense 2 Cookbook

Table of Contents

pfSense 2 Cookbook

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Instant Updates on New Packt Books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Initial Configuration

Introduction

Applying basic settings in General Setup

Getting ready

How to do it...

See also

Identifying and assigning interfaces

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring the WAN interface

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring the LAN interface

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring optional interfaces

Getting ready

How to do it...

How it works...

There's more...

See also

Enabling the Secure Shell (SSH)

Getting ready

How to do it...

How it works...

There's more...

See also

Generating authorized RSA keys

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring SSH RSA key authentication

Getting ready

How to do it...

How it works...

There's more...

See also

Accessing the Secure Shell (SSH)

Getting ready

How to do it...

How it works...

See also

2. Essential Services

Introduction

Configuring the DHCP server

Getting ready

How to do it...

How it works...

There’s more...

Deny Unknown Clients

DNS Servers

Gateway

Domain Name

Default Lease Time

Maximum Lease Time

Failover Peer IP

Static ARP

Dynamic DNS

Additional BOOTP/DHCP Options

See also

Creating static DHCP mappings

Getting ready

How to do it...

How it works...

There’s more...

See also

Configuring the DHCP relay

Getting ready

How to do it...

How it works...

Append Circuit ID and Agent ID to Requests

Relay requests to the WAN DHCP server

See also

Specifying alternate DNS servers

Getting ready

How to do it...

How it works...

Using the DNS Forwarder

Using your WAN DNS servers

See also

Configuring the DNS Forwarder

Getting ready

How to do it...

How it works...

See also

Configuring a standalone DHCP/DNS server

How to do it...

How it works...

Register DHCP Leases in DNS Forwarder

See also

Configuring dynamic DNS

Getting ready

How to do it...

How it works...

Pre-configured service types (dynamic DNS providers)

Specifying an alternative service using RFC 2136

3. General Configuration

Introduction

Creating an alias

How to do it...

How it works...

There's more...

Host alias

Network alias

Port alias

OpenVPN Users alias

URL alias

URL Table alias

Using an alias

Editing an alias

Deleting an alias:

Bulk-importing aliases

See also

Creating a NAT port forward rule

Getting ready

How to do it...

How it works...

There's more...

Port redirection

See also

Creating a firewall rule

Getting ready

How to do it...

How it works...

There's more...

We rarely know the source port!

Ordering firewall rules

Duplicating a firewall rule

Advanced features

See also

Creating a schedule

Getting ready

How to do it...

How it works...

There's more...

Selecting days or days of the week

See also

Remote desktop access, a complete example

Getting ready

How to do it...

How it works...

There's more...

See also

4. Virtual Private Networking

Introduction

Creating an IPsec VPN tunnel

Getting ready

How to do it...

How it works...

See also

Configuring the L2TP VPN service

Getting ready

How to do it...

How it works...

Connecting from a Windows 7 client

See also

Configuring the OpenVPN service

How to do it...

How it works...

Encryption algorithms

OpenVPN Client Export

See also

Configuring the PPTP VPN service

How to do it...

How it works...

Connecting from a Windows 7 client

Connecting from a Ubuntu 10.10 client

Connect from an Apple Mac OSx Client

See also

5. Advanced Configuration

Introduction

Creating a virtual IP

Getting ready

How to do it...

How it works...

There's more...

Configuring a CARP virtual IP address

Configuring a Proxy ARP virtual IP address

Configuring an IP alias virtual IP address

See also

Configuring a 1:1 NAT rule

How to do it...

How it works...

There's more...

See also

Creating an outbound NAT rule

Getting ready

How to do it...

How it works...

See also

Creating a gateway

Getting ready

How to do it...

How it works...

There's more...

Gateway Groups

See also

Creating a static route

Getting ready

How to do it...

How it works...

See also

Configuring traffic-shaping (QoS, Quality of Service)

Getting ready

How to do it...

How it works...

Bridging interfaces

How to do it...

How it works...

There's more...

See also

Creating a virtual LAN

Getting ready

How to do it...

How it works...

See also

Creating a captive portal

Getting ready

How to do it...

How it works...

There's more...

6. Redundancy, Load Balancing, and Failover

Introduction

Configuring multiple WAN interfaces

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring multi-WAN load balancing

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring multi-WAN failover

Getting ready

How to do it...

How it works...

There's more...

See also

Configuring a web server load balancer

Getting ready

How to do it...

How it works...

There's more

See also

Configuring a web server failover

Getting ready

How to do it...

How it works...

See also

Configuring CARP firewall failover

Getting ready

How to do it...

How it works...

See also

7. Services and Maintenance

Introduction

Enabling OLSR

How to do it...

How it works...

There's more...

Enabling PPPoE

How to do it...

How it works...

Enabling RIP

How to do it...

How it works...

Enabling SNMP

How to do it...

How it works...

There's more...

See also

Enabling UPnP and NAT-PMP

How to do it...

How it works...

There's more...

Security warning

See also

Enabling OpenNTPD

How to do it...

How it works...

See also

Enabling Wake On LAN (WOL)

How to do it...

How it works...

There's more...

Wake All

See also

Enabling external logging (syslog server)

Getting ready

How to do it...

How it works...

There's more...

See also

Using ping

How to do it...

How it works...

See also

Using traceroute

How to do it...

How it works...

See also

Backing up the configuration file

Getting ready...

How to do it...

How it works...

There's more...

Backup areas

See also

Restoring the configuration file

Getting ready...

How to do it...

How it works...

There's more...

Restore areas

See also

Configuring automatic configuration file backup

Getting ready

How to do it...

How it works...

There's more...

See also

Updating pfSense firmware

Getting ready

How to do it...

How it works...

There's more...

Upgrade in progress

System Dashboard shortcut

See also

A. Monitoring and Logging

Introduction

Customizing the Status Dashboard

How to do it...

How it works...

There's more...

Monitoring current traffic

How to do it...

How it works...

See also

Configuring SMTP e-mail notifications

Getting ready

How to do it...

How it works...

There's more...

Viewing system logs

How to do it...

How it works...

There's more...

Firewall log: Normal View

Firewall log: Dynamic View

Firewall log: Summary View

See also

Configuring an external syslog server

Getting ready

How to do it...

How it works...

Running a syslog service in Linux/Mac OS

Running a syslog service in Windows

See also

Viewing RRD graphs

How to do it...

How it works...

System

Traffic

Packets

Quality

VPN

Custom

See also

Viewing DHCP leases

How to do it...

How it works...

Adding a static DHCP mapping

Sending a wake on LAN mapping

See also

Managing services

How to do it...

How it works...

See also

Monitoring the packet filter with pfInfo

How to do it...

How it works...

See also

Monitoring traffic with pfTop

How to do it...

How it works...

See also

Monitoring system activity

How to do it...

How it works...

See also

B. Determining our Hardware Requirements

Introduction

Determining our deployment scenario

Getting ready

How to do it...

How it works...

There’s more...

Determining our throughput requirements

Getting ready

How to do it...

How it works...

There’s more...

List of available packages

See also

Determining our interface requirements

Getting ready

How to do it...

How it works...

There’s more...

pfSense 2.0: Minimum interface requirements

Choosing a standard or embedded Image

Getting ready

How to do it...

How it works...

There’s more...

See also

Choosing a Form Factor

Getting ready

How to do it…

How it works...

There’s more...

Installing the embedded platform on a desktop/server/laptop

Installing the standard platform on an appliance

See also

Index