Used primarily by visitors who require internet access but also acts as a backup in case AirVPN goes down for any reason. The particular gateway is selected depending on the specific services needs and risk profile.Įffectively this exposes my native unencrypted unsecured ISP line complete with OpenDNS name resolution. I have a number of self-hosted services that reside in a VLAN and have policy routing in place to steer outbound traffic through the clearnet, AirVPN or other privately hosted OpenVPN gateways. Primary LAN network where all traffic which exits is encrypted via OpenVPN and exits to the internet via one of several AirVPN end points. Used for general purpose web access when an encrypted line isn’t a requirement.

Local subnet overviewĪlthough this guide focuses on building out the core local area networks (VPN, clearnet, guest and management), I’ve provided some additional details here as to the rest of my VLANs setup for some context on how I segregated my other traffic. I’ve also heard of positive experiences on 4G LTE connections so long as the underlying connection is stable. I’ve seen good results on both cable and fibre providers with up/download capabilities in the 5/20 to asymmetric gigabit range. I created this guide towards supporting typical residential and/or small office ISP bandwidth capabilities. OpenVPN 2.5 is incorporated into this release and its changelog is here for reference. To learn more about the numberous changes included with pfSense 2.5.0, please review Netgate’s new features and changes list.

Expanded hardware section with some general recommendations.

Tweaks to ease transition for a new multi-WAN guide.

Updated DNS servers for Guest network to support addition of 4G-LTE WAN failover.

Refined DNS Resolver config to support pfBlockerNG’s DNSBL python based features.

Updated OpenVPN 2.5.0 cipher configuration.

Several iterations ago I revised my guide towards becoming a foundational piece in a series of guides aimed at helping users create a SOHO system capable of self-hosting numerous services and supporting migration away from cloud providers to take ownership of their own data.Īlthough this baseline configuration remains largely the same as the previous version, there are a few areas that have been improved due to increased or refined knowledge, or as a result of the pfSense 2.5.0 release including: Verification of functionality and performance.pfSense baseline guide with VPN, Guest and VLAN support Last revised 27 February 2021.

I continue to appreciate feedback on any errors, configuration or areas you think would benefit from additional clarification so please don’t hesitate to contact me by email. I would like to thank all those who contacted me with questions or provided feedback that contributed to making this guide what it is today. I published this guide several years ago to expose my thinking and configuration to the scrutiny of networking experts and benefit less experienced users with an easy to follow but comprehensive guide.

Airvpn onpfsense