Project Help: Using Two Extra Netgate Modems for Firewalling a Network

[nasheayahu]

Working on a project, I have two extra Negate modems I would like to incorporate into the above diagram, which is how its currently setup. I'm an amateur when it comes to firewall rules, and all LAN's have the standard allow all rule and can access the internet.

1. My first goal is to allow all networks to access the NFS on the KBBN7 network hosted by the Development KVM Server. Do I just open the standard NFS ports on the WAN?

[nasheayahu]

I found everything I needed to know and better here pfSense baseline guide with VPN, Guest and VLAN support.