StuRa Diskussion:Aora

Konfiguration 19.1

--Paul 20:25, 25. Apr. 2020 (CEST)

Assign Interfaches

VLANs
n

WAN interface
bce0

LAN interface
bce1

Optional 1
<null>

Set Interface(s) IP address

WAN (bce0)

DHCP
n
WAN IPv4 adress
141.56.51.130

subset
24

WAN IPv4 gateway
141.56.51.254

WAN IPv6
<null>

WAN (bce1)

LAN IPv4 adress
10.1.0.1

subset
24

LAN IPv4 gateway
<null>

LAN IPv6
<null>


DHCP server on LAN
y

start DHCP range
10.1.0.100

end DHCP range
10.1.0.200

->

http://10.1.0.1

admin
pfsense


change Password
> 8
save


System -> Certifiacte manager -CAs

Add


Des…name
(willkürlich)
VPN_CA

Save

----

Certifivate
Add

…name
VPN_CERT

Common name
Bereich Administration Rechentechnik StuRa HTW Dresden

Certifiacate Type
Server

Save

----

VPN
OpenVPN

--Nicht Wizard, obwohl das wohl auch gehen würde--

Add (Server)

Server mode
Remote Access (SSL/TLS)

Peer certificate 
(voreingestellt)
VPN_CA

Server certificate
VPN_CERT

IPV4 Tunnel Network
10.1.1.0/24

IPv4 Local network(s)
10.1.0.0/24

Duplicate Connection
X

Save

----

System -> Package Manager

suchen (und finden) openvpn

openvpn-client-export

confirm

openvpn reiter 'Client Export Utility'


----

Services -> auto configuration backup

enable auto configuration backup

Encrryption password
8

System -> USer Manager ->

add

Username
administration

Password
8

Full name
Bereich Administration Rechentechnik

Group memberships
admins

Certificate 
X

VPN_CERT_ADMINISTRATON

Save


----

General Setup -> DNS

141.56.1.1

141.56.1.2

----


Firewall Rules LAN

Regel für IPv6 entfernt


Firewall Rules WAN

Add

Port
UDP

Source
ANY

Destination
WAN address

Port range
OpenVPN (1194)

Save


Firewall Rules OpenVPN

Add

Source
ANY

Port
ANY

Destination
ANY