pfSense CE 2.8.0 Installation Guide
A detailed, step-by-step guide to installing pfSense CE 2.8.0 on a dedicated server or appliance, from preparing the bootable media to completing initial configuration.
Step 1: Download pfSense Installer
Go to the official pfSense website to get the Netgate Installer. You must create a free account to download it. This installer requires an internet connection during setup.
https://www.pfsense.org/download/
Step 2: Get Rufus Utility
You will need a tool to create a bootable USB from the installer image. Rufus is a highly recommended and reliable choice for Windows. Download it from the official website.
Step 3: Insert USB and Open Rufus
Insert a USB drive (at least 2GB) into your computer. Launch the Rufus utility. It should automatically detect and display your USB drive under 'Device'.
Step 4: Select the Installer Image
Under 'Boot selection', click 'SELECT'. Find the pfSense installer image file you downloaded and choose it. It will likely be a `.img.gz` or `.iso` file.
Step 5: Verify Rufus Settings
For a modern server, ensure 'Partition scheme' is set to 'GPT' and 'Target system' is 'UEFI (non CSM)'. The other settings usually do not need to be changed.
Step 6: Confirm Write Mode
Click 'START'. A pop-up will appear asking which write mode to use. It's best to select 'Write in DD Image mode' for pfSense images. Click 'OK' to continue.
Step 7: Start USB Creation
A final warning will pop up, alerting you that all data on the USB will be destroyed. Click 'OK' to confirm and begin the process of creating the bootable drive.
Step 8: Insert USB into Appliance
Once the USB creation is complete, unplug it from your computer. Insert the bootable USB drive into your pfSense appliance or target machine for the installation.
Step 9: Reboot and Enter BIOS
Reboot your appliance. As it starts up, press the key to enter the BIOS or UEFI settings. This key is often F2, F10, F12, or DEL, but it can vary by manufacturer.
Step 10: Change Boot Order
In the BIOS/UEFI settings, find the boot order menu. Change the priority to make your USB drive the first boot option. Save your changes and exit the BIOS.
Step 11: Launch Installer
The appliance will now boot from the USB. A boot menu will appear. The default selection will automatically boot to the installer. Wait for the process to load.
Step 12: Accept the Copyright
The first screen of the installer is the Copyright and Distribution Notice. Use the arrow keys to select 'Accept' and press Enter to proceed with the installation.
Step 13: Select Installation Method
The main menu will give you several options. Use the arrow keys to select 'Install' and press Enter. This will start the installation process.
Step 14: Choose a Filesystem
You will be prompted to choose a filesystem. For most users, 'Auto (UFS)' is the best choice. If you want advanced features like snapshots and data integrity, choose 'ZFS'.
Step 15: Select Target Disk
The installer will show a list of available drives. Use the Spacebar to select the disk where you want to install pfSense. Be careful, as all data will be erased on the selected disk.
Step 16: Final Confirmation
The installer will give one last warning that the selected disk will be erased. Confirm your selection and press Enter to begin the installation process.
Step 17: Installation in Progress
The installer will now format the disk and download the necessary files from the internet. This may take several minutes depending on your internet speed.
Step 18: Select Console Type
After the installation is complete, you'll be asked if you want to perform any final manual configuration. Choose 'No'. Then, select a console type. Choose 'VGA' for most setups.
Step 19: Finalize and Reboot
The installer will ask if you want to reboot. Select 'Reboot' and press Enter. Make sure to remove the USB drive from the system as it reboots.
Step 20: First Console Login
After reboot, the system will boot into pfSense. The console will show a menu. If it prompts for login, the default username is 'admin' and the password is 'pfsense'.
Step 21: Assign Interfaces
From the console menu, choose option `1` to 'Assign Interfaces'. The system will detect your network cards and ask you to assign them as WAN and LAN.
Step 22: Configure the LAN Interface
After assigning interfaces, you'll be returned to the main menu. Choose option `2` to 'Set interface(s) IP address'. Select the LAN interface to give it a static IP.
Step 23: Access the Web GUI
Connect a computer to the LAN port on your pfSense machine. On that computer, open a web browser and navigate to the LAN IP you set, using HTTPS. Ignore the security warning.
https://YOUR-LAN-IP
Step 24: Log in to the Web GUI
Log in to the web GUI using the default credentials. The username is 'admin' and the password is 'pfsense'.
Step 25: Initial Setup Wizard
The first time you log in, you will be greeted by the Setup Wizard. Follow the on-screen prompts to configure basic settings like hostname, domain, and DNS servers.
Step 26: Change Default Password
During the setup wizard, or immediately after, be sure to change the default 'admin' password. This is a crucial security step.
Step 27: Finalize and Review
Once the wizard is complete, you will be taken to the dashboard. You can now access all of the pfSense features and customize your firewall settings.
Step 28: Update System and Packages
Check for updates from the web GUI by navigating to 'System' > 'Update'. You can also install packages like pfBlockerNG or Suricata from 'System' > 'Package Manager'.
