Configuring a VPN tunnel using the pfSense Firewall

CompTIA Security+ (SY601) Domains:
Domain 3.0: Implementation

CompTIA Security+ (SY601) Objectives:
Objective 3.3: Given a scenario, implement secure protocols. 

Overview

In this lab, you will be working with the pfSense firewall to block ICMP requests, configure port redirection, and configure a VPN.  

outcomes

In this lab, you will learn to: 

  1. Configure ICMP on the firewall.
  2. Redirect traffic to internal hosts on a network.
  3. Configure a VPN on pfSense.

Key terms and descriptions

pfSense
pfSense is an open-source firewall/router. It is much more powerful than the traditional home routers/firewalls. pfSense not only supports firewall and routing functionality, VPN functionality, and NAT functionality but also has various add-ons such as an intrusion prevention system module.
Certificate Authority
A certificate authority manages the generation and configuration of public key encryption.
Public Key Encryption
Public key encryption uses an asymmetric encryption algorithm that requires two keys – a public key that is distributed and a private key which must be kept secret from everyone.
OpenVPN
OpenVPN is an open-source VPN that creates secure point-to-point or site-to-site secure connections,
ping
Ping is a special utility that tests for reachability of a host on a network. There is a special packet that is used to send echoes and replies back from the IP address that ping requests a response from.
ifconfig
The ifconfig command is a network administration tool on Linux that allows you configure network interfaces in Linux.
nmap
Nmap is an open-source network scanner used to discover hosts and open ports/services.
NAT
NAT is a used tool to hide internal network IP addresses from the outside world.