pfSense is a free, open-source network firewall distribution based on FreeBSD with a custom kernel. It provides comprehensive firewall functionality including network segmentation, access control, NAT, and DHCP services. The web-based interface allows for easy configuration without requiring command-line expertise.

Downloading pfSense

Download the pfSense Community Edition from the official website:

https://www.pfsense.org/download/

After downloading, verify the SHA256 checksum to ensure file integrity:

certutil -hashfile pfSense-CE-2.6.0-RELEASE-amd64.iso.gz sha256

Compare the calculated hash with the value provided on the download page.

Installation Process

Follow these steps to install pfSense on VMware Workstation:

1. Extract the downloaded ISO file
2. Create a new virtual machine in VMware Workstation with these specifications:
   • Operating System: Linux, Fedora 64-bit
   • Memory: 2GB
   • Processors: 1 socket, 2 cores
   • Network: Bridged
   • Hard Disk: 20GB
3. Mount the pfSense ISO to the virtual CD/DVD drive
4. Disable 3D graphics acceleration
5. Add a second virtual network adapter
6. Power on the virtual machine and proceed with installation
7. Accept the license agreement
8. Select "Install pfSense"
9. Choose keyboard layout and proceed
10. Select UFS partitioning (avoid UEFI for this setup)
11. When prompted about final modifications, select "No"
12. Reboot the system
13. Enter "n" when asked about VLAN configuration
14. Configure WAN interface as "vmx0" and LAN interface as "vmx1"
15. Set up network configuration for LAN interface with IP address in the NAT subnet
16. Enable DHCP for the LAN network

Initial Configuration

Access the pfSense web interface using the URL displayed after installation. The default credentials are:

• Username: admin
• Password: pfsense

Complete the setup wizard with these configurations:

• DNS: 223.5.5.5 (Aliyun DNS)
• NTP: ntp1.aliyun.com
• Timezone: UTC+8, Asia/Shanghai
• Change the default password

To switch the interface language to Chinese:

1. Navigate to System > General Setup
2. Scroll to Localization section
3. Select "Chinese" from the Language dropdown
4. Save the changes

Network Testing

Configure a test network to verify functionality:

1. Create a new "Host-Only" virtual network in VMware (named DMZ)
2. Disable DHCP on this network
3. Assign the second network adapter to this new DMZ network
4. Configure LAN interface with IP: 10.0.0.254/24
5. Set DHCP pool: 10.0.0.10-10.0.0.20

Test connectivity by:

• Creating a Windows 10 virtual machine
• Connecting it to the DMZ network
• Verifying it receives an IP address
• Pinging external addresses (e.g., Alibaba DNS at 223.5.5.5)

Virtual Machine Console Interface

The pfSense console provides several options:

• Assign network interfaces to adapters
• Configure IP addresses and DHCP
• Reset web interface password
• Factory reset
• System reboot and shutdown
• Network testing via ping
• Access to FreeBSD shell
• Network interface status