pfSense – P3 How to Configure WAN and LAN in pfSense (Step-by-Step)

Configuring WAN and LAN in pfSense correctly is one of the most important steps after installation. Without proper interface configuration, your firewall will not route traffic, provide internet access, or manage internal network communication effectively.

In this step-by-step tutorial, you will learn how to configure:

1. Basic pfSense configuration

2. WAN interface setup (PPPoE demo)

3. LAN interface setup with static IP and DHCP

This guide applies to both lab environments and real-world deployments.

🔹 1. Basic pfSense Configuration

After installing pfSense and accessing the Web GUI, the first step is performing the basic system configuration.

During initial setup, you should:

• Confirm hostname and domain

• Configure DNS settings

• Set timezone

• Verify interface assignments

Basic configuration ensures that your system is ready before moving to WAN and LAN configuration.

At this stage, no advanced tuning is required. The goal is to ensure that the firewall is accessible and prepared for proper interface setup.

🔹 2. WAN Interface Setup

The WAN interface connects pfSense to the internet or upstream network.

Multiple options are available depending on your ISP or lab design. Common WAN configuration types include:

• DHCP

• Static IP

• PPPoE

In this demo, we use PPPoE.

🌐 Configuring WAN with PPPoE

When selecting PPPoE:

• Enter the username provided by your ISP

• Enter the password provided by your ISP

• Save and apply changes

PPPoE is commonly used by fiber and DSL internet providers. Once configured correctly, pfSense will establish the WAN connection automatically.

After applying the configuration:

• Verify WAN status is online

• Check assigned public IP

• Confirm gateway status

If WAN fails to connect:

• Double-check PPPoE credentials

• Verify physical or virtual NIC connection

• Confirm upstream modem is in bridge mode (if applicable)

Correct WAN configuration is essential before proceeding to LAN setup.

🔹 3. LAN Interface Setup

The LAN interface connects pfSense to your internal network.

This step includes:

• Assigning a static IP address

• Enabling DHCP service

🖥 Configure Static IP for LAN

Set a static IP address for the LAN interface.

This IP will be used to access the pfSense Web GUI and act as the default gateway for clients.

Choose an IP address that:

• Does not conflict with other devices

• Matches your network design

• Is within a private IP range

After assigning the static IP, save and apply changes.

📡 Enable DHCP on LAN

To allow devices on your internal network to receive IP addresses automatically:

• Enable DHCP service

• Define the DHCP range

• Save and apply

Once DHCP is enabled:

• Client devices will receive IP addresses automatically

• Gateway and DNS settings will be assigned from pfSense

• Internal network connectivity becomes operational

🔎 Why Configuring WAN and LAN in pfSense Properly Matters

Correctly configuring WAN and LAN in pfSense ensures:

• Stable internet connectivity

• Secure internal routing

• Proper firewall rule enforcement

• Network segmentation capability

If WAN is misconfigured, there will be no internet access.
If LAN is misconfigured, clients cannot communicate properly.

Both interfaces must be set up carefully to build a reliable firewall infrastructure.

🚀 Best Practices After Configuration

After completing WAN and LAN setup:

• Test internet access from a LAN client

• Ping the gateway from a client device

• Verify DNS resolution

• Review default firewall rules

• Backup the pfSense configuration

Taking a configuration backup at this stage is highly recommended before applying advanced firewall rules or NAT configurations.

🏁 Conclusion

Learning how to configure WAN and LAN in pfSense is a foundational networking skill.

By following these structured steps:

1. Perform basic configuration

2. Set up WAN using PPPoE

3. Configure LAN with static IP

4. Enable DHCP

You establish a fully functional firewall environment ready for advanced configuration such as NAT rules, VLAN setup, VPN integration, and traffic control policies.

This completes Part 3 of the pfSense series and prepares your system for deeper firewall customization and network security tuning.