Navigate to System -> Advanced -> Admin Access.

Description: Allow public SSH access to pfSense.

Create a rule to allow ssh after we disable the anti-lockout rule.

Paste your SSH public key in the Authorized SSH Keys field.

System -> User Manager -> Users -> Admin.

Add your Secure Shell public key to the admin or a new user.

I expose Secure Shell publicly and disable password logins to keep the system locked down: Step 13 - Reconnect to the WebUI and Finish Enable and Configure sshd on WAN Interface When the installer concludes it will re-enable the firewall, you may need to run pfctl -d again from the serial console. Make sure the MTU of the WAN interface is set to 1460 to work with Google Cloud. Ssh _IP -L 8443:localhost:443Ĭonnect to the pfSense WebUI Accept the security exception, and complete the install wizard. Step 9 - Enable and Connect to Serial Console For Initial Configuration Start the instance and wait for it to complete start-up.

Under the advanced drop down -> networking tag create a pfsense Networking tag.

Size: 20GB (or something applicable for work load, typically only needed for logging).

Machine type: Pick something applicable to the work load.

Navigate to GCP Console -> Compute Engine -> Create an instance. Step 8 - Create and Launch New Instance Using Snapshot Navigate to GCP Console -> Compute Engine -> Disk.Ĭreate a snapshot of the pfsense-242-clean-install so that it can be used as a boot disk for our final instance. Step 7 - Create Snapshot of the Newly Installed Disk I typically stop the VM using the Google Cloud Console the last step of the installer when it asks to reboot.

Stop the instance when the install is complete instead of rebooting.

Step 6 - Follow Default Install and Shutdown Install Instance Gcloud compute connect-to-serial-port -project=$PROJ -zone=$ZONE pfsense-install-1 Gcloud compute instances add-metadata -project=$PROJ -zone=$ZONE -metadata=serial-port-enable=1 pfsense-install-1

Installing pfsense