professional-service-best-practices/terraform-pfsense-deployment
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updated readme

Browse source
This commit is contained in:
BackInBash 2024-01-29 17:20:30 +01:00
parent a009401566
commit 8e04716b00
1 changed files with 19 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
README.md
View file

@ -25,24 +25,26 @@ The Terraform deployment consists of:
1. Setup enviroment (.env) variables 1. Setup enviroment (.env) variables
1. Run Terraform `terraform apply` 1. Run Terraform `terraform apply`
## Configure Access to the WebUI ## Default Configuration
In order to access the pfSense WebUI you need to configure the Appliance via the webVNC console first.
### Interface Mapping ### Interfaces
The pfSense is asking for WAN and LAN interfaces. 1. `vtnet0` WAN
WAN must be mapped to `vtnet0` LAN to `vtnet1` 1. `vtnet1` LAN
### Enable WebUI Access ### NAT
In the menu overview enter the Shell and type in the following two commands. Masqurade (Outbound NAT) Traffic from `LAN` to `WAN`
1. To disable the http referer check ### DNS
```bash Disable build in unbound DNS resolver and forward all DNS queries to public DNS Servers OpenDNS & Quad9
pfSsh.php playback disablereferercheck
```
1. Allow access from WAN to the WebUI
```bash
pfSsh.php playback enableallowallwan
```
> Keep in mind this rule creates an any to any (allow all) rule to the WAN interface. Please restrict the access again asap.
Now you can enter the WebUI via the FloatingIP on port 443 the default login is `admin:pfsense` ### Dashboard
Customized Widgets and CSS settings
### Password
Set default password for admin to STACKIT123!
### Interface Access
Disabled Referer-Check
Enable allow all wan adresses to connect to the WebUI
Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!