Configuration Pfsense Documentation
Configuration Pfsense Documentation
html
Previous
Migrate from pfSense® CE so�ware to Netgate
pfSense Plus so�ware
Next
Setup Wizard
On This Page
▪ Connec�ng to the GUI
Configuration
• Setup Wizard
• Interface Configura�on
• Managing Lists in the GUI
• Quickly Navigate the GUI with Shortcuts
• General Configura�on Op�ons
• Advanced Configura�on Op�ons
• Console Menu Basics
• Rese�ng to Factory Defaults
• XML Configura�on File
• pfSense® Plus So�ware Registra�on
See also
Most pfSense® so�ware configura�on is performed using the web-based GUI. There are a few
tasks that may also be performed from the console, whether it be a monitor and keyboard, over
a serial port, or via SSH.
By default, the LAN IP address of a new installa�on of pfSense so�ware is 192.168.1.1 with
a /24 mask ( 255.255.255.0 ), and there is also a DHCP server running. If a client computer is
set to use DHCP, it should obtain an address in the LAN subnet automa�cally.
• On the client computer, open a web browser such as Firefox, Safari, or Chrome and navigate
to h�ps://192.168.1.1 .
The GUI listens on HTTPS by default, but if the browser a�empts to connect using HTTP, it
will be redirect by the firewall to the HTTPS port instead.
username:
admin
password:
pfsense
In some cases addi�onal steps may be necessary before the client computer can reach the GUI.
Warning
If the default LAN subnet conflicts with the WAN subnet, the LAN subnet must be changed
before connec�ng it to the rest of the network. A�emp�ng to access the GUI in this
situa�on is unpredictable and unlikely to work un�l the conflict is resolved.
The LAN IP address may be changed and DHCP may be disabled using the console:
• Open the console (VGA, serial, or using SSH from another interface)
• Choose op�on 2 from the console menu
• Enter the new LAN IP address, subnet mask, and specify whether or not to enable DHCP.
• Enter the star�ng and ending address of the DHCP pool if DHCP is enabled. This can be any
range inside the given subnet.
Note
When assigning a new LAN IP address, it cannot be in the same subnet as the WAN or any
other ac�ve interface. If there are other devices already present on the LAN subnet, it also
cannot be set to the same IP address as an exis�ng host.
2 of 3 3/20/23, 11:42 AM
Configuration | pfSense Documentation https://docs.netgate.com/pfsense/en/latest/config/index.html
If the DHCP server on the firewall is disabled, client computers on LAN must have a sta�cally
Netgate Docs Appliances Pla�orms Support Training
configured IP address in the LAN subnet, such as 192.168.1.5 , with a subnet mask that matches
the one given to the firewall, such as 255.255.255.0 .
3 of 3 3/20/23, 11:42 AM