professional-service-best-practices/terraform-pfsense-deployment
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updated readme

Browse source
This commit is contained in:
BackInBash 2024-01-29 17:20:30 +01:00
parent a009401566
commit 8e04716b00
1 changed files with 19 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
README.md
View file

@ -25,24 +25,26 @@ The Terraform deployment consists of:
1. Setup enviroment (.env) variables
1. Run Terraform `terraform apply`
## Configure Access to the WebUI
In order to access the pfSense WebUI you need to configure the Appliance via the webVNC console first.
## Default Configuration
### Interface Mapping
The pfSense is asking for WAN and LAN interfaces.
WAN must be mapped to `vtnet0` LAN to `vtnet1`
### Interfaces
1. `vtnet0` WAN
1. `vtnet1` LAN
### Enable WebUI Access
In the menu overview enter the Shell and type in the following two commands.
### NAT
Masqurade (Outbound NAT) Traffic from `LAN` to `WAN`
1. To disable the http referer check
```bash
pfSsh.php playback disablereferercheck
```
1. Allow access from WAN to the WebUI
```bash
pfSsh.php playback enableallowallwan
```
> Keep in mind this rule creates an any to any (allow all) rule to the WAN interface. Please restrict the access again asap.
### DNS
Disable build in unbound DNS resolver and forward all DNS queries to public DNS Servers OpenDNS & Quad9
Now you can enter the WebUI via the FloatingIP on port 443 the default login is `admin:pfsense`
### Dashboard
Customized Widgets and CSS settings
### Password
Set default password for admin to STACKIT123!
### Interface Access
Disabled Referer-Check
Enable allow all wan adresses to connect to the WebUI
Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!