官术网_书友最值得收藏!

  • pfSense 2 Cookbook
  • Matt Williamson
  • 330字
  • 2021-04-09 21:16:39

Configuring the WAN interface

This recipe describes how to configure the Wide Area Network (WAN) on the external interface of our firewall.

Getting ready

The WAN interface is your connection to the outside world. You'll need a properly configured WAN interface (as described in the previous chapter) and an Internet connection. In this example, a cable modem provides the Internet connection from our local Internet Service Provider (ISP), but pfSense will support every other major connection method.

How to do it...

  1. Browse to Interfaces | WAN.
  2. Check Enable Interface.
  3. Choose an address configuration Type.
  4. Leave MAC address blank. Manually entering a MAC address here is known as "spoofing". Your ISP has no way of verifying MAC addresses, so you can simply make one up. This can be helpful if you're trying to force your ISP to hand you a new IP address or a different set of DNS servers.
  5. Leave MTU, MSS, Hostname, and Alias IP address blank.
  6. Check Block private networks. This setting is usually only checked on a WAN interface.
  7. Check Block bogon networks. This setting is usually only checked on a WAN interface.
  8. Save changes.

How it works...

We must first establish our connection to the Internet before we can configure pfSense to allow our other networks to access it. The example we've performed is typical of many SOHO environments. By placing our firewall as the only machine with direct access to the Internet, we are securing our environment by establishing complete control over the traffic that flows in and out of our networks. All traffic must now pass through our firewall and abide by our rules.

There's more...

We can now connect our WAN device (cable modem) to the WAN Ethernet port we've defined on our pfSense box. Once the connection has been established, we can check the status of our WAN port from Status | Interfaces:

See also

  • The Identifying and assigning interfaces recipe
  • The Configuring the LAN interface recipe
  • The Configuring optional interfaces recipe
主站蜘蛛池模板: 莱州市| 杭锦后旗| 承德县| 吐鲁番市| 股票| 仁布县| 陆川县| 大丰市| 且末县| 威远县| 海口市| 商河县| 于都县| 汉沽区| 清水县| 十堰市| 绥德县| 白城市| 永修县| 剑川县| 松滋市| 铜陵市| 东城区| 赞皇县| 津南区| 中西区| 绥棱县| 丽水市| 九台市| 灵丘县| 宜宾市| 湟源县| 隆安县| 乳源| 深圳市| 长汀县| 台北县| 松阳县| 郯城县| 辉南县| 平南县|