VPN server – I.T. Engr Randoms

D-LINK Configuration | Screenshots

Screenshot from the D-Link admin page (Router Graphical User Interface)

Inside D-Link admin page, go to “Features” and select “Port Forwarding”.
Open the ports of IPSec for the PFsense firewall port 192.168.1.109.
UDP Port 500 and 4500.

pfsense Configuration |
Certificate Authority (CA)

pfsense Configuration |
VPN / IPsec / Mobile Clients

pfsense Configuration |
VPN / IPsec / Tunnels

After VPN Configurations, VPN > Tunnels page will look like this:

pfsense Configuration |
Firewall > Rules

Remote User Configuration |
Windows 10

Download first the crt file from pfsense and send to the remote user.
This cert file will be needed to be Installed in the user’s terminal.

* After distributing the crt file from pfsense to the remote users, share the instructions below regarding the installation of the certificate and the creation of VPN connection.

Import the CA to a Windows 10 Remote User PC

Export the CA Certificate from pfSense® and download or copy it to the client PC:
- Navigate to System > Cert Manager, Certificate Authorities tab on pfSense
- Click by the CA to download only the certificate
Locate the downloaded file on the client PC (e.g. VPNCA.crt) as seen in Figure Downloaded CA Certificate

../_images/ipsec-mobile-ikev2-windows-01-cert.png

Downloaded CA Certificate

Double click the CA file
Click Install Certificate… as shown in Certificate Properties

../_images/ipsec-mobile-ikev2-windows-02-certinstall.png

Certificate Properties

Select Local Machine as shown in Certificate Import Wizard – Store Location

../_images/ipsec-mobile-ikev2-windows-03-certlocalmachine.png

Certificate Import Wizard – Store Location

Click Next
Click Yes at the UAC prompt if it appears
Select Place all Certificates in the following store as shown in Figure Certificate Import Wizard – Browse for the Store

../_images/ipsec-mobile-ikev2-windows-04-certstore.png