pfSense Setup

Network Configuration

Configure routing, gateway, WiFi, and DHCP server for WiZone connection.

Step 1 - Add Gateway

  1. Go to System → Routing → Gateways.

  2. Click + Add to create a new gateway.
  3. Fill in the following details:
FieldValueDescription
InterfaceWG_WiZoneSelect the WireGuard interface you created earlier.
Address FamilyIPv4Choose IPv4 protocol
Name(choose any name)A name to identify this WiZone gateway– e.g., WIZONE_GW
Gateway10.255.0.1Gateway IP address (typically .1 in the WG subnet)
The gateway IP address is typically the first IP in your WireGuard interface subnet.
If your WG INTERFACE IP from the WiZone Portal is 10.255.0.X/24, the gateway is usually 10.255.0.1.

  1. Click Save and Apply Changes.

Step 2 - Add Routing

  1. Go to System → Routing → Static Routes.
  2. Click + Add to create a new route.
  3. Configure the route using the following settings:
FieldExample ValueDescription
Destination Network10.1.10.0/24Route traffic to the WiZone server
GatewayWIZONE_GW - 10.255.0.1Gateway created in Step 1
DescriptionWiZone SystemFor administrative reference

Optional : If you need access to the LKS Management network, add another static route
Destination Network: 10.1.200.0/24

Step 3 - Configure WiFi Interface

  1. Go to Interfaces → Assignments → WIFI (em2).
  2. Enable the interface and configure the following:
FieldExample ValueDescription
Enable(check the box)Turn on the WiFi interface
DescriptionWIFIInterface name
IPv4 Configuration TypeStatic IPv4Assign a static IP
IPv4 Address10.10.252.1/24Local WiFi network address


Step 4 - Add Firewall Rules for WiFi

To allow WiFi clients to access the internet and the WiZone tunnel, you must add a firewall rule on the WIFI interface.

  1. Go to Firewall → Rules → WIFI.
  2. Click + Add to create a new rule.

Fill in the following fields:

FieldValueDescription
ActionPassAllow all traffic
InterfaceWIFISelect your WiFi interface
Address FamilyIPv4WiFi network uses IPv4
ProtocolAnyAllow all protocols
SourceAnyAny device from WiFi network
DestinationAnyAllow outbound traffic

After saving, you should see a rule similar to this:

  1. Click Save and Apply Changes.

Step 5 - Configure DHCP Server

  1. Go to Services → DHCP Server → WIFI.
  2. Enable the DHCP server for the WiFi interface.
  3. Under Primary Address Pool, configure:
FieldExample ValueDescription
Address Pool Range10.10.252.10 to 10.10.252.30Range for DHCP clients
You may define any DHCP pool range, but it must stay within your WiFi network subnet

  1. Under Server Options, set DNS servers:
DNS ServerExample Value
DNS 110.10.252.1
DNS 28.8.8.8
DNS 31.1.1.1

  1. Under Other DHCP Options, configure:
FieldValueDescription
Gateway10.10.252.1Local gateway for WiFi
Domain Namewizone.ioDomain name for local network
Default Lease Time8640024 hours
Maximum Lease Time8640024 hours
  1. Click Save to apply the configuration.