Bookmark

Install pfSense Firewall/Router in VirtualBox

This article adapts the process of creating a pfSense virtual machine in VirtualBox with two network adapters for WAN and LAN. It focuses on the initial installation; network subnets, DHCP, and firewall rules should be designed for the actual lab topology.

Source reference: i12bretro – Install pfSense Firewall and Router in VirtualBox . The original video belongs to i12bretro on YouTube .

Youtube video player

Requirements

  • The pfSense installer from the official download page .
  • VirtualBox installed on the host.
  • Two network connections if the VM will operate as a router: one WAN and one LAN connection.
  • Back up the current network configuration before testing.

Create the VM and attach the ISO

  1. Extract the pfSense .gz archive if the download is compressed.
  2. Open VirtualBox, select Machine > New, create the VM, and click Create.
  3. Create a virtual disk sized for the lab and finish the wizard.
  4. Select the VM, open Settings > Display, and set Video Memory to 128 MB.
  5. Open Storage, select the CD-ROM drive, then choose Choose a virtual optical disc file....
  6. Select the pfSense ISO and click OK.
  7. Open Network and set Adapter 1 to Bridged Adapter.
  8. Open the Adapter 2 tab, enable it, and also select Bridged Adapter.
  9. Click OK, select the VM, and choose Start > Normal.

Install pfSense

  1. Press Enter to accept the copyright and distribution notice.
  2. Select Install pfSense and press Enter.
  3. Select the required keyboard mapping.
  4. Select Auto (UFS) Guided Disk Setup.
  5. Wait while pfSense copies files and installs to the virtual disk.
  6. At Manual Configuration, select No.
  7. Select Reboot.
  8. Before the VM boots again, use Devices > Optical Drives > Remove disk from virtual drive in VirtualBox.
  9. Select Machine > Reset so the VM boots from its virtual disk.

Assign the LAN address and open the Web UI

  1. In the pfSense menu, select Set interface(s) IP address by entering 2.
  2. Select the interface that will be used as LAN.
  3. Enter a LAN address on the same subnet as the management computer.
  4. Enter 24 at the bit-count prompt when using a /24 network.
  5. Leave the IPv4 upstream gateway empty for the LAN interface.
  6. Leave the IPv6 address empty if IPv6 is not being used.
  7. Enter n when asked whether to enable the DHCP server; DHCP can be configured later in the Web UI.
  8. Enter y when asked to revert to HTTP if this is only an initial setup on a trusted lab network.
  9. Note the Web UI address shown in the terminal.
  10. Open that address in a browser from the management computer.
  11. Log in initially with admin / pfsense, then open System > User Manager.
  12. Edit the admin account, set a new password, save it, log out, and log in again.

Warning: Do not keep the default password. Use Bridged Adapter only when the role of each interface is understood; an incorrect topology can create a loop or interrupt the physical network.

Source and video

0 Bình luận

Góp Ý / Bình Luận / Đánh giá