WEBVTT 00:00:01.240 --> 00:00:03.480 All right, welcome to this demo. 00:00:03.490 --> 00:00:05.390 This is the first one in this course, 00:00:05.400 --> 00:00:10.290 and what we're going to use it for is to actually install pfSense. This 00:00:10.290 --> 00:00:14.810 way we have the firewall installed and ready to go for our follow‑on 00:00:14.810 --> 00:00:18.910 demos where we'll actually be segmenting the network and setting up 00:00:18.910 --> 00:00:24.380 remote access protections and authentications with Active Directory. So, 00:00:24.380 --> 00:00:28.480 the first thing that we need to do is download pfSense. And if you go to 00:00:28.480 --> 00:00:29.720 the pfSense website, 00:00:29.720 --> 00:00:32.240 you can download the latest version by just clicking on this 00:00:32.240 --> 00:00:36.430 link. And as you can see, as of this recording, 00:00:36.440 --> 00:00:39.400 the most recent version is version 2.6, 00:00:39.410 --> 00:00:42.510 which is what we're already going to be using in the lab. Now, 00:00:42.510 --> 00:00:45.770 I've already downloaded this, but if you wanted to you can select your 00:00:45.770 --> 00:00:50.310 image to download based on your architecture, and you could even 00:00:50.310 --> 00:00:52.960 download the daily snapshot builds that they have. 00:00:53.940 --> 00:00:58.940 So let's hop over to our vCenter instance, and as you can see, I already have 00:00:58.950 --> 00:01:02.060 other hosts here that we'll be using throughout this course, 00:01:02.640 --> 00:01:06.090 more specifically, our domain controller and the jump box, 00:01:06.090 --> 00:01:08.060 and then we have a test PC down here. 00:01:09.540 --> 00:01:11.740 So the first thing that I'm going to do is go ahead and create a 00:01:11.740 --> 00:01:14.910 new virtual machine, and we'll call it GloboFW. 00:01:15.840 --> 00:01:18.150 I'm just going to put it on this data store, 00:01:20.040 --> 00:01:23.660 leave the compatibility, and then for the actual operating 00:01:23.660 --> 00:01:26.560 system, we're going to do FreeBSD 12 or later. 00:01:28.640 --> 00:01:31.360 Now if you're not building this virtually and you're using an actual 00:01:31.360 --> 00:01:35.180 physical firewall from pfSense, then that's awesome. 00:01:35.190 --> 00:01:38.000 You shouldn't have to worry about configuring this stuff because it should 00:01:38.000 --> 00:01:42.220 already be installed and you should be able to just plug it in and get going, 00:01:42.220 --> 00:01:45.810 but if you're doing a virtual machine, then there's some aspects of the 00:01:45.810 --> 00:01:47.950 configuration that we have to customize first. 00:01:48.840 --> 00:01:51.750 All right, we'll give it some resources here. 00:01:51.760 --> 00:01:54.140 We probably don't even need this much, but I just wanted to make 00:01:54.140 --> 00:01:56.320 sure that we don't have any problems in the lab. 00:01:56.330 --> 00:01:59.530 Again, make sure you scale up your CPU and your memory, 00:01:59.530 --> 00:02:03.570 your hard drive space based on your actual use cases for this and 00:02:03.570 --> 00:02:05.160 the amount of traffic that you'll be seeing. 00:02:05.940 --> 00:02:09.050 We also need to have multiple interfaces, right? 00:02:09.050 --> 00:02:13.270 So this first one is going to be our WAN interface, and then for the 00:02:13.270 --> 00:02:17.480 purposes of this course, we're going to be adding two other 00:02:17.480 --> 00:02:20.340 interfaces to represent two other networks. 00:02:20.350 --> 00:02:23.650 So, two different VLANs, one of them is going to be our management 00:02:23.660 --> 00:02:28.160 device VLAN, and the other one is going to be our user VLAN. All right, 00:02:28.160 --> 00:02:32.580 now that those interfaces are created for our respective VLANs, all we 00:02:32.580 --> 00:02:38.630 have to do is add the image or the ISO file. And it looks like our data 00:02:38.630 --> 00:02:39.950 store is not working. 00:02:39.950 --> 00:02:42.370 Let's go see if we have the file somewhere else. 00:02:43.340 --> 00:02:47.260 All right, so let's go ahead and we'll just create it like this for now. 00:02:47.940 --> 00:02:50.410 So the virtual machine is created, but before we do that, 00:02:50.410 --> 00:02:52.460 we need to add the actual ISO file. 00:02:54.640 --> 00:02:55.270 All right. 00:02:55.270 --> 00:02:58.660 And I just finished uploading that file to the data store. 00:02:59.240 --> 00:03:02.320 So let's go into the firewall and edit the settings. 00:03:03.270 --> 00:03:05.690 I stored just in the built‑in data store, 00:03:05.700 --> 00:03:11.260 under the images folder. And here it is, the pfSense 2.6 release. 00:03:11.640 --> 00:03:15.240 We'll put that in the DVD drive and make sure we connect it. 00:03:15.240 --> 00:03:19.190 That way it boots on startup. And then now we just have to turn 00:03:19.190 --> 00:03:21.260 it on and complete the installation. 00:03:22.240 --> 00:03:25.410 We'll go in and watch it boot up, and as you can see, we have some options, 00:03:25.450 --> 00:03:29.750 we're just going to let it boot so we can install it. Now this is 00:03:29.750 --> 00:03:33.100 going to run in and install the pfSense firewall on this virtual 00:03:33.100 --> 00:03:35.750 machine image for FreeBSD that we created. 00:03:36.840 --> 00:03:40.060 We'll walk through the prompts real quick, and then we 00:03:40.060 --> 00:03:44.210 just hit Install pfSense. We'll keep the default key map, 00:03:44.210 --> 00:03:45.350 but if you need to change it, 00:03:45.350 --> 00:03:50.120 you can. We'll do auto‑guided ZFS for the disk, and then we'll leave 00:03:50.120 --> 00:03:54.540 all this the standard size. Should only need to modify this if you have 00:03:54.540 --> 00:03:56.580 a custom installation that you want to do, 00:03:56.590 --> 00:03:59.730 that you know specifically create RAID disks and stuff like that. 00:03:59.740 --> 00:04:02.540 Now that that's done, we walk through all the prompts, we're just going 00:04:02.540 --> 00:04:07.260 to go ahead and let it install. And I'll fast‑forward this clip right 00:04:07.260 --> 00:04:09.200 here so we don't have to wait and watch it. 00:04:09.210 --> 00:04:12.890 So in reality, it might take a few minutes or longer, depending on your 00:04:12.890 --> 00:04:16.560 setup, but in this clip it'll only take a couple of seconds. 00:04:17.240 --> 00:04:20.010 All right, and now that the installation is finished, 00:04:20.079 --> 00:04:23.260 we can make some modifications if we wanted to in the shell. 00:04:23.740 --> 00:04:27.070 Let's hit Yes and see what we have. I'm not going to do anything. 00:04:27.070 --> 00:04:29.620 And let's reboot. While that's booting, 00:04:29.620 --> 00:04:34.610 we can go ahead and undo the CD drive as well. Now that it's fully installed, 00:04:34.610 --> 00:04:40.110 we don't need that anymore. You can disconnect it. And upon this first boot, 00:04:40.110 --> 00:04:43.260 it's going to bring us into the initial configuration screen, and as you can 00:04:43.260 --> 00:04:47.710 see, we have three different interfaces. We'll make sure we IP them correctly 00:04:47.710 --> 00:04:52.640 and get the firewall set up to be able to manage it in the GUI. So we're not 00:04:52.640 --> 00:04:54.060 going to set up VLANs just yet. 00:04:55.240 --> 00:04:59.020 Now, vmx0 is the interface that we designated for that WAN 00:04:59.020 --> 00:05:03.510 connection, so we're going to type that, and then vmx1 is the LAN 00:05:03.520 --> 00:05:06.380 interface, but we're going to change that name once we get to the 00:05:06.380 --> 00:05:09.600 GUI. And then vmx2 is the optional one, 00:05:09.940 --> 00:05:17.060 the additional one that we created. All right, and now that we're in here, 00:05:17.640 --> 00:05:23.100 we need to set some IP addresses. So we'll hit 2 and set our IP 00:05:23.100 --> 00:05:33.290 addresses. I'll do it for the WAN interface. And we're going to hit no 00:05:33.290 --> 00:05:39.210 for IPv6. What this is asking us is if we want it to use the insecure 00:05:39.220 --> 00:05:43.170 protocol for HTTP for the web configurator, 00:05:43.180 --> 00:05:45.860 which is the GUI. So we're going to hit no. 00:05:48.040 --> 00:05:53.400 And we have our IP address set for the WAN interface now. We'll do the LAN 00:05:53.400 --> 00:05:58.270 interface real quick as well, and this is going to be my default gateway 00:05:58.270 --> 00:06:00.560 for what's going to be our management network. 00:06:02.240 --> 00:06:04.000 All right, now that that's done, 00:06:04.010 --> 00:06:07.610 we should be able to reset the web password as well, 00:06:07.610 --> 00:06:10.060 so we'll do that real quick, and then we should be able to jump into it. 00:06:12.240 --> 00:06:16.020 All right, now that that's done, the password is reset to what it should be, 00:06:16.030 --> 00:06:18.060 we can go ahead and try to get into it.