Projekt

Allgemein

Profil

PfSense » Historie » Revision 11

Revision 10 (Jeremias Keihsler, 15.04.2024 11:58) → Revision 11/12 (Jeremias Keihsler, 17.04.2024 09:30)

h1. PfSense 

 h2. Install pfSense on an APU-Box 

 h3. connect via serial interface 

 see also https://redmine.omb-automation.com/projects/dw_os_cos9/wiki/Howto_screen 

 h3. copy image to USB-stick 

 see also https://redmine.omb-automation.com/projects/dw_os_cos9/wiki/Howto_dd 

 <pre><code class="shell"> 
 dd if=pfSense-CE-memstick-serial-2.7.2-RELEASE-amd64.img of=/dev/sdb bs=4M status=progress 
 </code></pre> 

 h2. OpenVPN-Server setup 

 taken from:  
 * https://www.biteno.com/tutorial/openvpn-auf-einer-pfsense-firewall-einrichten/ 
 * https://www.thomas-krenn.com/de/wiki/OPNsense_OpenVPN_f%C3%BCr_Road_Warrior_einrichten 

 h3. using pfSense as OpenVPN-client in a satellite-office 

 https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-s2s-tls.html 

 friendly reminder .. allow the satellite-office in the @smb.conf@ on your server as well 

 this uses an outdated 'shared-key' approach 

 https://mitky.com/pfsense-openvpn-site-to-site-vpn/ 

 h2. reach pfSense from abroad via SSH-Tunnel 

 taken from: http://blogs.uni-due.de/zim/2014/01/30/es-muss-nicht-immer-vpn-sein-ein-ssh-tunnel-realisiert-einen-socks-proxy-fur-nat-umgebungen-oder-ipv6-only-angebundene-unitymedia-kunden/ 
 see also "SSH"