TORGUARD PFSENSE SETUP MANUAL
TORGUARD PFSENSE SETUP CODE
TORGUARD PFSENSE SETUP PASSWORD

Step Five: Insert the correct DNS Servers for the pfSense VPN setup Go to Status –> OpenVPN and restart the Client.

Section Translation, Address: Interface address.

Source: Network – 192.168.1.0 /24 (or subnet that was configured on the LAN interface).

Leave all existing rules, and create a new rule by clicking on Add (with the arrow pointing down) button at the bottom.

Now you should see 6 rules under Mappings.

TORGUARD PFSENSE SETUP MANUAL

Change the Mode to Manual Outbound NAT rule generation, then save and apply changes.

With Firewall Rules we tell pfSense to route everything through the Proton VPN interface (and with that, through the secure connection) we set up in Step Three.

Description: Name of the Interface (alphanumeric only).

Press on OPT1 on the left of the interface.

In our case, this is Proton VPN IS-03 UDP as ovpnc1. To route the whole network through the secure Proton VPN tunnel, we need to set up Interfaces and Firewall rules first. The pfSense VPN setup was done successfully and is already up and running at this point, but it won’t route any traffic through it, yet. Step Three: Configuring the OpenVPN Interface If everything was done correctly for the pfSense VPN setup, you should see the Client there now and the status is up.

Don’t add/remove routes: Leave unchecked.

Topology: Subnet - One IP address per client in a common subnet.

Limit outgoing bandwidth: Leave blank, unless you prefer otherwise.

If you want to be safe, choose No hardware crypto acceleration. If it’s supported it has to be turned on under System –> Advanced –> Miscellaneous as well.

Hardware Crypto: Depending on your device.

Auth digest algorithm: SHA512 (512-bit).

If it’s supported it has to be turned on under System –> Advanced –> Miscellaneous as well.

Hardware Crypto: Depending on your device.

Auth digest algorithm: SHA512 (512-bit).

Encryption Algorithm: For reliability, use AES-256-CBC (256 bit key, 128 bit block).

TORGUARD PFSENSE SETUP PASSWORD

Client Certificate: None (Username and/or Password required).Peer Certificate Authority: Proton VPN AG (or the descriptive name you used in Step One).The Key starts with -–BEGIN OpenVPN Static key V1-–and ends with -–END OpenVPN Static key V1-– TLS Key: Paste the Key from the OpenVPN configuration file.Automatically generate a TLS Key: Unchecked.Note: to use our NetShield DNS filtering feature, append the suffix +f1 to your Username to block malware, or +f2 to block malware, ads, and trackers (for example 123456789+f2). Password: Your Proton VPN OpenVPN Password (enter twice).Username: Your Proton VPN OpenVPN Username.Description: Choose a Display Name for this Configuration.Server port: If Protocol is TCP use 443 if Protocol is UDP use 1194.In this example, we will use 185.159.158.50 which is the Server IS-03 To get the IP Address, use a DNS lookup tool like.

TORGUARD PFSENSE SETUP CODE

The server consists of the country code and the server number.

Server host or address: The IP Address of the server you want to connect to.

Protocol: Either UDP on IPv4 only or TCP on IPv4 only depending on your choice.

Go to VPN –> OpenVPN –> Clients and press Add.

In this step, we create the client that handles the encryption and the tunneling of the data itself.

Paste this certificate in the field Certificate data.

The certificate starts with -–BEGIN CERTIFICATE-– and ends with -–END CERTIFICATE-–.

Open the previously downloaded OpenVPN configuration file and copy the certificate.

Select Import an existing Certificate Authority as Method.

Choose a Descriptive Name such as Proton VPN AG.

When logged in to the pfSense frontend, go to System –> Cert.

To be able to use the pfSense OpenVPN Client, we need to add the Proton VPN Certificate to the system. The configuration files can be downloaded in the Downloads category on your account.

A computer in the LAN network to access the pfSense frontend.

Preconfigured and working pfSense 2.4.5-*.

Torguard pfsense setup