How to Setup ExtremeVPN on pfSense (2.5.2) Router

Here are the steps to follow to get the credentials which you will need for setting up ExtremeVPN on pfSense;

• Visit the ExtremeVPN member area. You can click here to visit our member area.
• Enter your ExtremeVPN registered email address and password in the space provided and click on Login.
• Once logged in, click on the Subscription tab, which you will see on the left panel.
• On the subscription page, scroll down to see your VPN credentials.
• You can see and copy your ExtremeVPN credentials, which consist of your username and password. Click on the Eye icon beside your password to make it visible and more accessible to copy.

Follow the steps stated below to set up ExtremeVPN on the pfSense 2.5.2 router effectively;

• First, download the required ExtremeVPN files from here and extract them.
• Login to your pfSense status dashboard and click on System.
• From the drop-down menu that appears, select Cert. Manager and click on + Add to add a new CA certificate.
• On the create/edit CA page, type in the following information;

1. Descriptive name: ExtremeVPN_CA
2. Method: Import an existing Certificate Authority
3. Certificate Data: Open and copy the ca.2crt file and paste its content in the space provided.
4. Click the Save button.

• Next, on the pfSense dashboard, go to the VPN tab.
• From the drop-down menu, select ExtremeVPN and go to the Clients tab.
• Click on the +Add to create your VPN profile.
• On the next page, type the following information:

1. Server Mode: Choose Peer-to-Peer (SSL/TLS)
2. Protocol: TCP on IPv4 only or UDP on IPv4 only
3. Device Mode: tun- Layer 3 Tunnel Mode
4. Interface: WAN
5. Server host or address: de-obf-evpn.pointtoserver.com (You can select your prefered server address from this list here)
6. Server Port: Enter 80 for TCP or 53 for UDP
7. Proxy Authentication: None
8. Avoid configuring or changing any other options.
9. Username and Password: Enter your ExtremeVPN credentials.
10. Go to Cryptographic Settings.
11. TLS Configuration: Use a TLS Key. Uncheck the Automatically generate a TLS Key.
12. Open and copy the Wdc.key and paste its content in the space provided beside the TLS key.
13. TLS Key Usage Mode: Select TLS Authentication
14. TLS Keydir Direction: Choose default direction
15. Peer Certificate Authority: ExtremeVPN_CA (choose the CA you created earlier)
    Client Certificate: None
16. Data Encryption Negotiation: Check the box
17. Data Encryption Algorithm: Add AES-128-GCM and AES-256-CBC on the Allowed
18. Data Encryption Algorithm box.
19. Fallback Data Encryption Algorithm: AES-256-GCM
20. Authentication digest Algorithm: SHA1 (160 bit)
21. Hardware Crypto: No Hardware Crypto Acceleration
22. Under Advanced Settings, just set the Gateway as IPv4 only.

• After filling in all this information, click on Save.
• Next, go back to your pfSense dashboard and select the Firewall tab.
• From the drop-down menu, select NAT.
• Go to the Outbound tab.
• Select Manual Outbound NAT rule generation (AON – Advanced Outbound NAT).
• Click on Save and Apply Changes.
• You will be directed to a Mappings window. You will need to change each of the WAN perimeters to ExtremeVPN. You can do this by clicking the Edit button, which you will see as a pencil icon.
• Once you click on the pencil icon, you can make the following changes and leave the rest as it is:

1. Interface: ExtremeVPN
2. Address family: IPV4
3. Protocol: any
4. Address: Interface Address
5. Under Translation, go to Static Port and check the box beside it.
6. Click on Save.

• You will need to perform the above steps three more times to change all the WAN perimeters to ExtremeVPN.
• Finally, you can return to the pfSense dashboard and click on the Status tab.
• Select ExtremeVPN to check your connection status.
• You will see that ExtremeVPN has successfully connected to your pfSense 2.5.2 router.