Created with Fabric.js 5.3.0
pfSense Setup

Network Configuration

Configure routing, gateway, WiFi, and DHCP server for WiZone connection.
Note: The IP Addresses in this guide are examples only. You may use any IP Range that suits your network configuration.

Step 1 - Add Gateway

  1. Go to System → Routing → Gateways.

  2. Click + Add to create a new gateway.
  3. Fill in the following details:
FieldValueDescription
InterfaceWG_WiZoneSelect the WireGuard interface you created earlier.
Address FamilyIPv4Choose IPv4 protocol
Name(choose any name)A name to identify this WiZone gateway– e.g., WIZONE_GW
Gateway10.255.0.1Gateway IP address (typically .1 in the WG subnet)
The gateway IP address is typically the first IP in your WireGuard interface subnet.
If your WG INTERFACE IP from the WiZone Portal is 10.255.0.X/24, the gateway is usually 10.255.0.1.

  1. Click Save and Apply Changes.

Step 2 - Add Routing

  1. Go to System → Routing → Static Routes.
  2. Click + Add to create a new route.
  3. Configure the route using the following settings:
FieldExample ValueDescription
Destination Network10.1.10.0/24Route traffic to the WiZone server
GatewayWIZONE_GW - 10.255.0.1Gateway created in Step 1
DescriptionWiZone SystemFor administrative reference

Optional : If you need allow wizone support team remote access to your NAS, add another static route
Destination Network: 10.1.200.0/24

Step 3 - Configure WiFi Interface

  1. Go to Interfaces → Assignments → WIFI (em2).
  2. Enable the interface and configure the following:
FieldExample ValueDescription
Enable(check the box)Turn on the WiFi interface
DescriptionWIFIInterface name
IPv4 Configuration TypeStatic IPv4Assign a static IP
IPv4 Address10.10.252.1/24Local WiFi network address (use your system's IP)
Use your own IP Range: The example uses 10.10.252.1/24, but you can use other ranges such as 192.168.10.1/24 or 172.16.1.1/24 as appropriate for your network.

Step 4 - Add Firewall Rules for WiFi

To allow WiFi clients to access the internet and the WiZone tunnel, you must add a firewall rule on the WIFI interface.

  1. Go to Firewall → Rules → WIFI.
  2. Click + Add to create a new rule.

Fill in the following fields:

FieldValueDescription
ActionPassAllow all traffic
InterfaceWIFISelect your WiFi interface
Address FamilyIPv4WiFi network uses IPv4
ProtocolAnyAllow all protocols
SourceAnyAny device from WiFi network
DestinationAnyAllow outbound traffic

After saving, you should see a rule similar to this:

  1. Click Save and Apply Changes.

Step 5 - Configure DHCP Server

  1. Go to Services → DHCP Server → WIFI.
  2. Enable the DHCP server for the WiFi interface.
  3. Under Primary Address Pool, configure:
FieldExample ValueDescription
Address Pool Range10.10.252.10 to 10.10.252.30Range for DHCP clients (adjust according to your IP Range)
DHCP Pool must be in the same Subnet as the WiFi Interface: For example, if your WiFi Interface is 192.168.10.1/24, set the Pool to 192.168.10.10 - 192.168.10.254.

  1. Under Server Options, set DNS servers:
DNS ServerExample Value
DNS 110.10.252.1 (use WiFi Interface IP)
DNS 28.8.8.8
DNS 31.1.1.1

  1. Under Other DHCP Options, configure:
FieldValueDescription
Gateway10.10.252.1(use WiFi Interface IP)
Domain Namewizone.ioDomain name for local network
Default Lease Time8640024 hours
Maximum Lease Time8640024 hours
  1. Click Save to apply the configuration.

WireGuard Connection

This section shows you how to enable the WireGuard service, apply the required firewall rules, and confirm that your device is successfully connected to WiZone.

Configure WiZone RADIUS

This section explains how to configure RADIUS authentication, certificates, DNS resolver, and captive portal for WiZone.