Additonal Networks in PFSense
This is a quick guide to adding additional networks, and giving them internet in PFSense
After adding the networks, and assigning them as outlined in the PF Sense settup section of the wiki as the two Optional networks, you will need to make some further changes for network, and also to setup a DMZ network with no access to other LAN networks.
- Go to the Firewall > Rules tab in pfsense, and select the LAN network interface.
-
No select the rule for IPV4, labeled "LAN net", and copy the rule using the copy button to all of the network interfaces you want to provide network to its hosts. Now these networks will provide internet connections the the devices on them. Make sure you have chanegd the network of your VM's if using this as I have with VCenter
-
Now for DMZ networks we need to make a quick rule, to block traffic to each of the networks we would like to protect. CLick on the network, then add, and configure as following:
Action = Block
Interface = DMZ
Protocol = any
Source = DMZ
Destination = (The network to protect)
Then click Save to update the rule.
To protect other networks, repeat these steps replacing the destination with each interface.
- Finally make sure these rules are above the internet rule in order, as PFsense applies the rules to traffic in the order presented in the firewall rules tab.