官术网_书友最值得收藏!

  • pfSense 2 Cookbook
  • Matt Williamson
  • 330字
  • 2021-04-09 21:16:39

Configuring the WAN interface

This recipe describes how to configure the Wide Area Network (WAN) on the external interface of our firewall.

Getting ready

The WAN interface is your connection to the outside world. You'll need a properly configured WAN interface (as described in the previous chapter) and an Internet connection. In this example, a cable modem provides the Internet connection from our local Internet Service Provider (ISP), but pfSense will support every other major connection method.

How to do it...

  1. Browse to Interfaces | WAN.
  2. Check Enable Interface.
  3. Choose an address configuration Type.
  4. Leave MAC address blank. Manually entering a MAC address here is known as "spoofing". Your ISP has no way of verifying MAC addresses, so you can simply make one up. This can be helpful if you're trying to force your ISP to hand you a new IP address or a different set of DNS servers.
  5. Leave MTU, MSS, Hostname, and Alias IP address blank.
  6. Check Block private networks. This setting is usually only checked on a WAN interface.
  7. Check Block bogon networks. This setting is usually only checked on a WAN interface.
  8. Save changes.

How it works...

We must first establish our connection to the Internet before we can configure pfSense to allow our other networks to access it. The example we've performed is typical of many SOHO environments. By placing our firewall as the only machine with direct access to the Internet, we are securing our environment by establishing complete control over the traffic that flows in and out of our networks. All traffic must now pass through our firewall and abide by our rules.

There's more...

We can now connect our WAN device (cable modem) to the WAN Ethernet port we've defined on our pfSense box. Once the connection has been established, we can check the status of our WAN port from Status | Interfaces:

See also

  • The Identifying and assigning interfaces recipe
  • The Configuring the LAN interface recipe
  • The Configuring optional interfaces recipe
主站蜘蛛池模板: 武城县| 道孚县| 铁岭县| 齐河县| 简阳市| 青阳县| 北宁市| 九龙县| 茂名市| 涿州市| 平山县| 房产| 通海县| 屏南县| 互助| 黄骅市| 双峰县| 乳山市| 重庆市| 弋阳县| 银川市| 鸡西市| 观塘区| 永泰县| 江陵县| 花莲市| 孝感市| 康定县| 玉山县| 营山县| 高碑店市| 潞西市| 滁州市| 阿鲁科尔沁旗| 白朗县| 鲁山县| 安化县| 双桥区| 托克逊县| 屏边| 胶南市|