Step 1
Login to website client page: https://privatevpn.com/account/login
Step 2
Proceed to WireGuard configurations panel and then select your preferred Server location.
Optional: You may enter a name for the configuration.
for this guide, we will select a Sweden-based server. Click Generate button.
Step 3
Your WireGuard login will be generated below. Take note of the details.
Step 4
Go to pfSense web panel > System > Package Manager > Available Packages.
Search for WireGuard and then proceed to install.
Step 5
Go to VPN > WireGuard > Tunnels menu and then click + Add Tunnel button.
Step 6
Enter the following settings:
Tick Enable Tunnel
Description: PrivateVPN_WG
Interface Keys: (enter your WireGuard login PrivateKey)
Interface Addresses: (enter your WireGuard login Address)
Click Save Tunnel button.
Step 7
Proceed to Peers tab and then click + Add Peer button.
Step 8
Enter the following:
Tick Enable Peer
Tunnel: PrivateVPN_WG
Description: Stockholm (any name would do)
Untick Dynamic Endpoint
Endpoint: (your WireGuard login Endpoint)
*you can find the server list here.
Endpoint Port: 3389
Public Key: (your WireGuard login PublicKey)
Allowed IPs: 0.0.0.0/0
Click Save Peer button.
Step 9
Go to Settings tab, tick Enable WireGuard and then click on Save button.
Step 10
Proceed to Interfaces > Assignments menu. Select the WireGuard tunnel (tun_wg0) and then click on + Add button.
Then click OPT1.
Step 11
Enter the following settings:
Tick Enable interface
IPV4 Configuration Type: Static IPv4
IPv6 Configuration Type: None
IPv4 Address: (your WireGuard login Address)
Click Save button and then Apply Changes.
Step 12
Proceed to System > Routing > Gateways menu. Click + Add button.
Step 13
Enter the following:
Interface: OPT1
Address Family: IPV4
Name: PrivateVPN_GW
Gateway: (your WireGuard login Address)
Click Save button and then Apply Changes.
Step 14
Return to Interfaces > OPT1 menu.
Set the IPv4 Upstream gateway to PrivateVPN_GW.
Click Save button and then Apply Changes.
Step 15
Proceed to Firewall > NAT > Outbound menu.
Select Manual Outbound NAT rule generation.
Click on Save button and then Apply Changes.
Step 16
Locate the rule with the Description: Auto created rule - LAN to WAN. Click the pencil icon to edit mapping.
Step 17
Change the Interface from WAN to OPT1. Then set the Address Family to IPv4.
Click on Save button and then Apply Changes.
Step 18
Go to Firewall > Rules > LAN.
Click the pencil button with the rule: Default allow LAN to any rule.
Step 19
Click Display Advanced button and then set the Gateway to PrivateVPN_GW.
Click on Save button and then Apply Changes.
