pfSense - aesser11/home-lab GitHub Wiki

How to connect to the SG-3100 USB console in case of emergency

  1. Connect the mini-usb to usb-a cable to the computer
  2. Launch a terminal window
  3. Run ls -l /dev/cu.* to get the device id of the pfsense system console
    1. It should look like /dev/cu.usbserial-<id>.
  4. Run sudo screen /dev/cu.usbserial-<id> 115200 with that id
  5. Login and follow the prompts to run whatever local command needed to restore the system.

Note

If needed install the Silicon Labs CP210x USB to UART Bridge driver here CP210x VCP for macOS.

References

https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/connect-to-console.html

Setting up a new device general steps

Restore from backup is the best way to do this -> Services -> Auto Configuration Backup -> Restore - https://192.168.1.1/services_acb.php

  • setup dhcp reservation on 0-127 ips
  • set static nat outbound for dhcp space
  • set dhcp space for remaining 128-255 ips
  • set dns static mappings for lancache
  • disable dnssec (to allow cache poisoning which is for lancache)
  • email notifications require port 465
  • set inbound firewall rules
  • enable wireguard vpn for remote management
  • enable ntp
  • enable auto backups