Editing PF Sense Firewall Implementation at GIPL (section)

=== Server Certificate ===
Fill in the fields to create a new '''Server Certificate'''. Similar Fields as CA entry, most of the fields carry over and do not need changed. 

Click '''Create new Certificate''' 


[[Image:Gpil-053.jpg]]


Now that we have all the components in place we can configure OpenVPN. Head over to VPN–>OpenVPN.

.

[[Image:Gpil-054.jpeg]]


Select “Wizards” from the tab at the top which will guide us step by step to configure OpenVPN


[[Image:Gpil-055.jpeg]]


[[Image:Gpil-056.jpeg]]

We will select the local user access database provided by pfSense

In the next step we will be selecting the CA that we created at the beginning of this article.

[[Image:Gpil-057.jpg]]


Following is the Server Certificate that we will be using which is the Certificate that we recently created.


[[Image:Gpil-058.jpg]]

'''OpenVPN Server Configuration'''

* '''TLS Authentication''' -- Leave this checked, along with the box underneath to generate a new key. Using a TLS key is technically optional, but ''highly'' recommended
* '''Tunnel Network''' -- Should be a new, unique network that does not exist anywhere in the current network or routing table. 

[[Image:Gpil-059.jpg]]

[[Image:Gpil-060.jpg]]

[[Image:Gpil-061.jpg]]

Click '''Next'''