Also prevents access to all local resources such as file servers etc. Used primarily by visitors who require internet access but also acts as a backup if AirVPN goes down for any reason. Guest networkĮffectively this exposes my native unencrypted unsecured Verizon FIOS line complete with Verizons DNS servers. Primary LAN network where all traffic which exits is encrypted via OpenVPN and exits to the internet via an AirVPN end point disguising my location. Used for general purpose surfing when an encrypted line isn’t a requirement. I now require the following isolated segments and primarily this drove my decision to move to a VLAN based setup. My home and office has grown to require more than just the two local networks my previous guide afforded me. I’ve added some further explanations along the way try and compensate for new users. This is a slightly more lengthy and complicated setup than the previous guide but I think the trade offs are worth it. I’m not going to set up all the above services in this base guide, my plan is to provide them as add-on steps for those who need them. ISP speed increased to 150/150mbps up/down from 150/15.

Simultaneous multiple VPN WAN connections providing redundancy.

Implemented pfBlockerNG to provide network wide advert and tracker scrubbing.

Provide Inbound access via OpenVPN for remote access to services.

replaced DNS Forwarder with the DNS Resolver.

provision of a dedicated ‘guest’ network for visitors.

use of multiple VLANs to segregate traffic between the various networks rather than relying on multiple NICs.

Replaced Apple Airport wifi access points with Ubiquiti Unifi enterprise wifi access points.

Increased security via improved firewall rule sets.

Based on pfSense 2.3 which includes a new look and feel as well as other numerous updates and improvements.

My setup has changed pretty significantly from my original pfSense guide and I wanted to update it reflect some of those improvements.

NOTE: This pfSense 2.3 guide is now deprecated, please see the updated pfSense 2.4 guide here. PfSense 2.3 setup with AirVPN, DNS Resolver and VLANs Last revised 5 April 2016.

Where to download pfsense 2.3