At this point, we have installed pfSense and performed much of the basic configuration. We have already done the following:

• Determined our hardware requirements
• Installed pfSense
• Assigned and configured interfaces
• Set up SSH access
• Added VLANs, if necessary

Now we are ready to configure several of the essential services that our pfSense system will provide:

• The DHCP/DHCP6 service will enable clients to obtain IP addresses automatically.
• The DNS server will enable clients to resolve hostnames to IP addresses.
• The dynamic DNS service will allow pfSense to update a host’s DNS record when that host’s IP address changes.

This recipe describes how to configure the DHCP server. The DHCP server assigns an IP address to anyone who requests one.

In order to enable the DHCP server on an interface, that interface must have a static IP address. If you have followed the recipes in order, you should have at least one interface with a static IP address (the LAN interface). This example will show how to configure the DHCP server on the LAN interface.

1. Navigate to Services | DHCP Server.
2. Click on the LAN tab, if it isn’t selected already...

This recipe describes how to configure the DHCP6 server. The DHCP6 server accepts DHCP6 requests from clients and assigns them IPv6 addresses from the pool of available addresses.

In order to enable the DHCP6 server on an interface, you must have at least one interface configured with a static IPv6 address. This was an option in the Configuring the LAN interface and the Configuring an optional interface recipes. If you did not configure any of the non-WAN interfaces with a static IPv6 address, you must first reconfigure at least one of them. If necessary, use the recipes in Chapter 1, Initial Configuration, as a guide. In this recipe, we will describe how to enable the DHCP6 server...

This recipe describes how to add a static (IPv4) DHCP mapping in pfSense. A static mapping ensures that a client always receives the same IP address from the DHCP server.

In order to create a static DHCP mapping, you must have at least one interface on which the DHCP server is enabled. (You can only create static DHCP mappings on interfaces using the DHCP server).

There are two ways of creating a static DHCP mapping.

1. Navigate to Services | DHCP and click on the LAN tab, if it isn’t selected already...

This recipe describes how to configure pfSense to relay DHCP request between broadcast domains. This serves as an alternative to pfSense acting as a DHCP server.

pfSense can only be configured as a DHCP relay if the DHCP server has been disabled on all interfaces. If necessary, disable the DHCP server first. To disable the DHCP server, do the following:

1. Navigate to Services | DHCP Server.
2. Click on the tab for the interface on which the DHCP server is enabled (for example, LAN).
3. Uncheck the Enable DHCP Server on the interface checkbox.
4. Click on the Save button.
5. Repeat Steps 2 through 4 for each interface on which the DHCP server is enabled.

This recipe describes how to configure pfSense to use DNS servers other than the ones provided by your WAN connection.

In most environments, routers rely on DHCP servers specified by the ISP through their WAN connection. For this reason, by default, pfSense has the Allow DNS server list to be overridden by DHCP/PPP on WAN option enabled. To specify alternate DNS servers manually, we will have to disable this option, which we will do in the following recipe.

1. Navigate to System | General Setup.
2. In the DNS Servers...

This recipe describes how to configure the DNS resolver in pfSense. The DNS resolver allows pfSense to act as a DNS server.

The DNS resolver allows pfSense to resolve DNS requests using hostnames obtained by the DHCP service, statically obtained DHCP mappings, or manually obtained information. The DNS resolver can also forward all DNS requests for a particular domain to a server specified manually.

This recipe describes how to configure pfSense as a stand-alone DHCP and DNS server.

1. Configure pfSense as a DHCP server. See the Configuring the DHCP server recipe for details.
2. Create DHCP mappings for every device in the system that will obtain its IP address automatically through DHCP. See the Creating static DHCP mappings recipe for details.

3. Navigate to System | General Setup.

4. Ensure that no other DNS servers are specified.
5. Check the Allow DNS server list to be overridden by DHCP/PPP on WAN checkbox. This will enable pfSense to resolve external addresses using the DNS servers provided by your ISP through your WAN connection.
6. Click on the Save button.
7. Navigate...