Professional Documents
Culture Documents
Search
Personal tools
Log in
Installing pfSense
From PFSenseDocs
Contents
1 pfSense Installation and Configuration 2 Booting and Media 2.1 Embedded 2.1.1 Special Information 2.1.2 Writing the image 2.1.2.1 Windows 2.1.2.2 Linux 2.1.2.3 PXE 2.1.3 Booting pfSense the first time 2.2 Tutorial for setting up a PC-Engines WRAP 2.3 LiveCD / Hard Drive 2.3.1 The Install option 2.4 Virtual Machine Install 3 Initial pfSense configuration 3.1 Assigning Interfaces 3.1.1 VLANS 3.1.2 LAN, WAN, OPTx 3.1.3 Auto Assign Procedure 4 Finishing steps 4.1 pfSense default configuration 4.2 Storing your configfile on a writable media 4.3 Accessing the webgui 5 Installing pfSense to Hard Disk 6 Additional Information
https://doc.pfsense.org/index.php/Installing_pfSense
1/15
3/2/2014
When using a windows machine the easiest way to write your media is with physdiskwrite (http://m0n0.ch/wall/physdiskwrite.php) . Place physdiskwrite and the pfSense image in the same folder. Attach the media you want to store pfSense on (i.e. CFReader and CF-Card). Then issue the following command:
p h y s d i s k w r i t ep f S e n s e 1 . 2 . 3 R E L E A S E x g n a n o b s d . i m g . g z
Physdiskwrite will show you a numbered list of suitable devices (USB-stick, CF-cards in USB-readers, harddisks,...). Enter the number of the desired media.
https://doc.pfsense.org/index.php/Installing_pfSense 2/15
3/2/2014
Linux
For Linux machines, use the built in dd (http://en.wikipedia.org/wiki/Dd_%28Unix%29) command from a terminal shell. Extract the downloaded gzipped archive first with unp (http://www.unixmen.com/unp-universel-file-extractor/) .
u n pp f S e n s e 1 . 2 . 3 R E L E A S E x g n a n o b s d . i m g . g z
If the convenience utility unp is not installed, use gunzip (http://en.wikipedia.org/wiki/Gzip#gunzip_and_zcat) instead. The img file is a raw copy of the target compact flash disk, including the partition table, mbr, boot sectors and file system. Write it to your media with dd.
d di f = p f S e n s e 2 . 0 . 1 R E L E A S E 1 g i 3 8 6 n a n o b s d . i m go f = / d e v / s d z
You will need to amend if= (input file) when your downloaded file name varies. Destination of= (output file) is where the image is written to. It should be a block device, and the first 1Gb will be overwritten. It is set to the seldom used sdz in the above example, to prevent accidental overwrite if the command is pasted directly. Use df (http://en.wikipedia.org/wiki/Df_%28Unix%29) or lsusb to determine the device name for your compact flash. WARNING By choosing the wrong destination you might wipe one of your hard disks! Check and recheck your selection again!!
PXE
Some Alix boards can PXE boot from the network. If you boot a sysresccd (http://www.sysresccd.org/Sysresccdmanual-en_PXE_network_booting) serial console image, you could then write the pfSense image to the compact flash with the above steps, without having to physically remove it from the firewall device. You can auto start script sysresccd, and could therefore clean install and customize many firewall devices unattended. Booting pfSense the first time Before attempting to boot, if you are using NanoBSD (pfSense 1.2.3 or newer) on ALIX hardware, ensure you have the latest BIOS (at least 0.99h) and set CHS mode in the BIOS. After your media is successfully written, place it in your system as bootmedia. Check your BIOS to select the correct boot priority and configure the device. If everything is configured correctly you should see the kernel beginning to load. At systems with VGA the output will stop displaying a "/" at the screen. From that point on all output is at COM1. Please check the bootup process there by using a null modemcable and a terminal program. The image has a default config that works with the ALIX and the SOEKRIS. With these platforms simply connect a client to the LAN Interface and it gets an IP by DHCP. You can access pfSense at 192.168.1.1. Logon with user "admin" and password "pfsense". If you are using a direct connect from your client to the pfSense interface remember that you need a crossover cable. For other systems please continue at "Initial pfSense configuration" as you most likely have to assign interfaces before you can access pfSense's webgui.
https://doc.pfsense.org/index.php/Installing_pfSense 3/15
3/2/2014
3/2/2014
You at least need two interfaces (LAN and WAN) to setup pfSense. If you have more interfaces available you can go on and assign them as OPTx interfaces. The procedure is the same like for the already assigned interfaces. Auto Assign Procedure There is another procedure to assign interfaces which is especially designed if your nics are all of the same kind and you don't know which physical nic matches which detected nic as they all then will appear for example as fxpX. In this case you simply can enter "a" when you are asked for the nic name. pfSense now is waiting for a linkup event at one of the nics. Just plug in a cable to the nic you want to assign and wait for the link light to turn on at the nic. Hit enter after that. pfSense has detected the linkup and you can continue with the next interface. If you have no more interfaces left just hit enter without entering a NIC name and apply the settings by confirming them with "y".
Finishing steps
pfSense now will make the finishing touches to configure the interfaces.
After it went through the configuration you'll end up with a shell menu and a number of options. pfSense now is ready to be accessed at the interface you assigned as LAN with the webgui.
https://doc.pfsense.org/index.php/Installing_pfSense
5/15
3/2/2014
3/2/2014
(Basically you can run through the installer by just accepting all suggestions the installer is offering)
First you get some settings to localize your keyboard or change your console appearance. Change what you need or just go one by accepting the settings.
https://doc.pfsense.org/index.php/Installing_pfSense
7/15
3/2/2014
Next pfSense will present a list with detected suitable installmedias to you. Please make sure you are not accidently overwriting data you still need. It's recommended to have a dedicated media only for your install. Any other constelations are not officially supported. Choose your media and hit enter to continue.
You should format the disk to prepare it for the installation. Beware this will whipe your entire media!
https://doc.pfsense.org/index.php/Installing_pfSense
8/15
3/2/2014
At the next step pfSense will show you the detected drive geometry. You should leave this the way it was detected as long as you don't run into any troubles while installing with these settings. In case you get errors try to alter your bios settings befor manually entering values here. Setting your drive from auto to lba or chs in bioas already might help to detect the right settings.
Now you are at the point of no return: Only hit "Format xxX" if you are really sure there is no valuable data left at this media!
https://doc.pfsense.org/index.php/Installing_pfSense
9/15
3/2/2014
The media is now prepared to continue with partitioning. Just hit enter to move on.
pfSense suggests using the complete space of your drive for the installation. You usually should just keep this setting and move on to the next step.
https://doc.pfsense.org/index.php/Installing_pfSense
10/15
3/2/2014
In case your partitioning was the same like before as this is a reinstall confirm the changes.
You typically can confirm the following step. If you encounter problems with the bootloader after the installation is done rerun the installation and check "Packet mode" at this screen.
https://doc.pfsense.org/index.php/Installing_pfSense
11/15
3/2/2014
Confirm this step. In case you skipped the above settings this is the point where your data on the media will be overwritten.
https://doc.pfsense.org/index.php/Installing_pfSense
12/15
3/2/2014
pfSense suggests a setting for your subpartitioning now which you usually should just keep.
After accepting the above settings pfSense is starting to transfer the system to the prepared media.
https://doc.pfsense.org/index.php/Installing_pfSense
13/15
3/2/2014
You will be asked after a short time to remove the CD and reboot the system to boot your new install.
The system is now going down for reboot and your installation is finished
https://doc.pfsense.org/index.php/Installing_pfSense
14/15
3/2/2014
Additional Information
For additional information on Installing pfSense, see the page Category:Installation. Retrieved from "https://doc.pfsense.org/index.php?title=Installing_pfSense&oldid=5415" Categories: Documentation Installation Privacy policy About PFSenseDocs Disclaimers
This page was last modified on 9 October 2013, at 09:20. This page has been accessed 485,377 times.
https://doc.pfsense.org/index.php/Installing_pfSense
15/15