Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Remote access from outside to pfSense box

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 3 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V Offline
      voip
      last edited by

      Hi there.

      I have a very simple pfSense test setup, my ALIX2 board (running pfSense) is connected to my notebook via LAN and multiWAN has been setup (Fiber and Regular DSL Line).
      What I am currently looking for now is a method that I can access my pfSense interace from outside e.g when I am at the office or at home. What would be the best and easiest way to have this achieved?

      Some expert help would be greatly appreciated.

      Thank you very much.

      1 Reply Last reply Reply Quote 0
      • DerelictD Offline
        Derelict LAYER 8 Netgate
        last edited by

        A VPN, probably OpenVPN Remote Access, then connect to your webconfig after the VPN is up.

        Or, considerably less desirable, a firewall rule on WAN allowing access to the webconfig port on WAN address.

        That should give you plenty of search terms for the forum and doc.pfsense.org.  Multiple examples exist in those places.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • V Offline
          voip
          last edited by

          Thank you very much for the kind answer - I will look into these methods although (being new to this) they sound quite difficult.

          For the time being I have found another tutorial which explains how to setup a dynamic dns (I did it using no-ip free account) The Cached IP is correct and it also updates within the No-ip account page, however if I try to access the hostname (myname.ddns.net) I cannot reach the pfsense interface. Is there anything in particular I would need to add / change in order for this method to work?

          Thank you very much

          1 Reply Last reply Reply Quote 0
          • A Offline
            AndrewZ
            last edited by

            DynDNS only allows you to reach your WAN interface by it's name. Firewall rules and/or VPN will allow you to go further through the firewall.

            1 Reply Last reply Reply Quote 0
            • DerelictD Offline
              Derelict LAYER 8 Netgate
              last edited by

              Yes,  The firewall rule on WAN allowing access to your webconfig port on WAN address.

              The reason I hesitate to spell it out for you is because it's not a desirable thing to do.  Plenty of examples already out there.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.