How do I set up a computer behind the pfsense box?



  • I have a pfsense box hooked up to the Internet. Version 2.0 RC3 i386 installed on the HDD. It has 4 NICs on it. I assigned the WAN interface to DHCP and it has an IP address and I am able to log into the web interface just fine. What I want to do is plug a machine into one of the NICs and be able to access the Internet, my network, etc. When I try to assign one of the NICs to a LAN and plug my PC into the NIC, I can no longer access the web interface. This seems like a simple task but I'm not getting it. The tutorials don't go over this very well. Thank you.



  • you have to assign TWO interfaces.

    One is the WAN and one is the LAN interface. This is minimum. After starting pfsense the first time you will be promted to do this.

    Then you'll have to assign an IP to each interface. On the LAN NIC your can activate a DHCP server (then you have to enter the DHCP IP Range).

    after this you have to create a firewall rule on your LAN interface which allows the traffic FROM the LAN TO the internet.

    Then you can plug in your client to the LAN interface of your pfsense.



  • I assigned the WAN interface and it works fine. When I assign a LAN, I can no longer access the web interface so there's no way I can make a rule.



  • @user000001:

    I assigned the WAN interface and it works fine. When I assign a LAN, I can no longer access the web interface so there's no way I can make a rule.

    So how do you access the web GUI before you assign a LAN? And what exactly is it you do when you assign a LAN

    What version of pfSense are you using? If I recall correctly, in version 1.2.3 the initial console dialog on the reboot after installation required specification of both WAN and LAN.

    PERHAPS when you assign a LAN you are actually reassigning the interface pfSense calls LAN such that the new set of parameters no longer allow access. Perhaps you changed the pfSense LAN interface (e.g. from re2 to re1) or changed the IP subnet (e.g. 192.168.1.1/24 to 192.168.2.57/24).

    @Nachtfalke:

    after this you have to create a firewall rule on your LAN interface which allows the traffic FROM the LAN TO the internet.

    On the interface pfSense calls LAN pfSense creates a default firewall rule to allow traffic to the internet. If other interfaces are configured (e.g. OPT1, OPT2 etc) there is no such default rule and all traffic on those interfaces will be blocked unless appropriate firewall rules are created for the interfaces.



  • Thanks for the suggestions guys I got it working yesterday afternoon. It turns out I was including the LAN address in my range of LAN DHCP addresses. This was the cause of my troubles. So my LAN address was 192.168.1.1 but I used a DHCP range of 192.168.1.1 - 192.168.1.20. After changing it to 192.168.1.10 - 192.168.1.20 it worked.


Log in to reply