{"id":4491,"date":"2020-02-03T15:27:11","date_gmt":"2020-02-03T07:27:11","guid":{"rendered":"https:\/\/blog.pfchina.org\/?p=4491"},"modified":"2020-08-24T17:25:22","modified_gmt":"2020-08-24T09:25:22","slug":"%e5%9c%a8pfsense%e4%b8%ad%e5%bb%ba%e7%ab%8bnord-vpn%e8%bf%9e%e6%8e%a5","status":"publish","type":"post","link":"https:\/\/blog.pfchina.org\/?p=4491","title":{"rendered":"\u5728pfSense\u4e2d\u5efa\u7acbNord VPN\u8fde\u63a5"},"content":{"rendered":"

Nord VPN<\/a>\u662f\u4e00\u5bb6\u8457\u540d\u7684VPN\u63d0\u4f9b\u5546\uff0c\u5b83\u63d0\u4f9b\u7684VPN\u670d\u52a1\u53ef\u4ee5\u4fdd\u62a4\u4f60\u7684\u7f51\u7edc\u5b89\u5168\uff0c\u4fdd\u62a4\u4f60\u7684\u9690\u79c1\u3002\u5728pfSense\u4e2d\uff0c\u53ef\u4ee5\u4f7f\u7528OpenVPN\u6765\u8fde\u63a5Nord VPN\uff0c\u4e0b\u9762\u4ecb\u7ecd\u8bbe\u7f6e\u65b9\u6cd5\u3002<\/p>\n

\u4e00\u3001\u5bfc\u5165\u8bc1\u4e66<\/span><\/h1>\n

\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95eepfSense\uff0c<\/span>\u7136\u540e\u5bfc\u822a\u81f3System\u00a0->\u00a0Cert. Manager\u00a0->\u00a0CAs\u3002\u7136\u540e\u9009\u62e9\u00a0+Add\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u4e8c\u3001\u9009\u62e9VPN\u670d\u52a1\u5668<\/span><\/h1>\n

\u914d\u7f6epfSense\u6765\u8fde\u63a5\u5230NL120\u670d\u52a1\u5668\uff0c\u5fc5\u987b\u662f<\/span>Nord VPN<\/span>\u5efa\u8bae\u7684\u670d\u52a1\u5668<\/a> \uff0c<\/span>\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/span><\/p>\n

\"\"<\/a><\/p>\n

\u586b\u5199\u5982\u4e0b\u5b57\u6bb5\uff1a<\/p>\n

\u63cf\u8ff0\u540d\u79f0: NordVPN_NL120_CA
\n\u65b9\u6cd5: Import an existing Certificate Authority
\n\u8bc1\u4e66\u6570\u636e:
\n-----BEGIN CERTIFICATE-----
\nMIIFCjCCAvKgAwIBAgIBATANBgkqhkiG9w0BAQ0FADA5MQswCQYDVQQGEwJQQTEQ
\nMA4GA1UEChMHTm9yZFZQTjEYMBYGA1UEAxMPTm9yZFZQTiBSb290IENBMB4XDTE2
\nMDEwMTAwMDAwMFoXDTM1MTIzMTIzNTk1OVowOTELMAkGA1UEBhMCUEExEDAOBgNV
\nBAoTB05vcmRWUE4xGDAWBgNVBAMTD05vcmRWUE4gUm9vdCBDQTCCAiIwDQYJKoZI
\nhvcNAQEBBQADggIPADCCAgoCggIBAMkr\/BYhyo0F2upsIMXwC6QvkZps3NN2\/eQF
\nkfQIS1gql0aejsKsEnmY0Kaon8uZCTXPsRH1gQNgg5D2gixdd1mJUvV3dE3y9FJr
\nXMoDkXdCGBodvKJyU6lcfEVF6\/UxHcbBguZK9UtRHS9eJYm3rpL\/5huQMCppX7kU
\neQ8dpCwd3iKITqwd1ZudDqsWaU0vqzC2H55IyaZ\/5\/TnCk31Q1UP6BksbbuRcwOV
\nskEDsm6YoWDnn\/IIzGOYnFJRzQH5jTz3j1QBvRIuQuBuvUkfhx1FEwhwZigrcxXu
\nMP+QgM54kezgziJUaZcOM2zF3lvrwMvXDMfNeIoJABv9ljw969xQ8czQCU5lMVmA
\n37ltv5Ec9U5hZuwk\/9QO1Z+d\/r6Jx0mlurS8gnCAKJgwa3kyZw6e4FZ8mYL4vpRR
\nhPdvRTWCMJkeB4yBHyhxUmTRgJHm6YR3D6hcFAc9cQcTEl\/I60tMdz33G6m0O42s
\nQt\/+AR3YCY\/RusWVBJB\/qNS94EtNtj8iaebCQW1jHAhvGmFILVR9lzD0EzWKHkvy
\nWEjmUVRgCDd6Ne3eFRNS73gdv\/C3l5boYySeu4exkEYVxVRn8DhCxs0MnkMHWFK6
\nMyzXCCn+JnWFDYPfDKHvpff\/kLDobtPBf+Lbch5wQy9quY27xaj0XwLyjOltpiST
\nLWae\/Q4vAgMBAAGjHTAbMAwGA1UdEwQFMAMBAf8wCwYDVR0PBAQDAgEGMA0GCSqG
\nSIb3DQEBDQUAA4ICAQC9fUL2sZPxIN2mD32VeNySTgZlCEdVmlq471o\/bDMP4B8g
\nnQesFRtXY2ZCjs50Jm73B2LViL9qlREmI6vE5IC8IsRBJSV4ce1WYxyXro5rmVg\/
\nk6a10rlsbK\/eg\/\/GHoJxDdXDOokLUSnxt7gk3QKpX6eCdh67p0PuWm\/7WUJQxH2S
\nDxsT9vB\/iZriTIEe\/ILoOQF0Aqp7AgNCcLcLAmbxXQkXYCCSB35Vp06u+eTWjG0\/
\npyS5V14stGtw+fA0DJp5ZJV4eqJ5LqxMlYvEZ\/qKTEdoCeaXv2QEmN6dVqjDoTAo
\nk0t5u4YRXzEVCfXAC3ocplNdtCA72wjFJcSbfif4BSC8bDACTXtnPC7nD0VndZLp
\n+RiNLeiENhk0oTC+UVdSc+n2nJOzkCK0vYu0Ads4JGIB7g8IB3z2t9ICmsWrgnhd
\nNdcOe15BincrGA8avQ1cWXsfIKEjbrnEuEk9b5jel6NfHtPKoHc9mDpRdNPISeVa
\nwDBM1mJChneHt59Nh8Gah74+TM1jBsw4fhJPvoc7Atcg740JErb904mZfkIEmojC
\nVPhBHVQ9LHBAdM8qFI2kRK0IynOmAZhexlP\/aT\/kpEsEPyaZQlnBn3An1CRz8h0S
\nPApL8PytggYKeQmRhl499+6jLxcZ2IegLfqq41dzIjwHwTMplg+1pKIOVojpWA==
\n-----END CERTIFICATE-----
\n<\/code><\/p>\n

\u70b9\u51fbSave(\u4fdd\u5b58)<\/p>\n

\u4e09\u3001\u8bbe\u7f6eVPN\u5ba2\u6237\u7aef<\/h1>\n

1\u3001\u5e38\u89c4\u4fe1\u606f<\/h2>\n

\u5bfc\u822a\u5230VPN\u00a0->\u00a0OpenVPN\u00a0->\u00a0Clients\uff0c\u70b9\u51fb+Add\uff0c\u586b\u5199\u4ee5\u4e0b\u5b57\u6bb5\uff1a<\/p>\n

\u7981\u7528\u6b64\u5ba2\u6237\u7aef\uff1a\u4e0d\u9009\u3002
\n\u670d\u52a1\u5668\u6a21\u5f0f\uff1a\u70b9\u5bf9\u70b9\uff08SSL \/ TLS\uff09\uff1b
\n\u534f\u8bae\uff1a\u4ec5IPv4\u4e0a\u7684UDP\uff08\u4e5f\u53ef\u4ee5\u4f7f\u7528TCP\uff09\uff1b
\n\u8bbe\u5907\u6a21\u5f0f\uff1atun \u2013\u7b2c3\u5c42\u96a7\u9053\u6a21\u5f0f\uff1b
\n\u63a5\u53e3\uff1awan\uff1b
\n\u672c\u5730\u7aef\u53e3\uff1a\u7559\u7a7a\uff1b
\n\u670d\u52a1\u5668\u4e3b\u673a\u6216\u5730\u5740\uff1anl120.nordvpn.com\uff1b
\n\u670d\u52a1\u5668\u7aef\u53e3\uff1a1194\uff08\u5982\u679c\u4f7f\u7528TCP\uff0c\u5219\u4f7f\u7528443\uff09\uff1b
\n\u4ee3\u7406\u4e3b\u673a\u6216\u5730\u5740\uff1a\u7559\u7a7a\uff1b
\n\u4ee3\u7406\u7aef\u53e3\uff1a\u7559\u7a7a\uff1b
\n\u4ee3\u7406\u8eab\u4efd\u9a8c\u8bc1\uff1anone\uff1b
\n\u63cf\u8ff0\uff1aNordVPN_NL120\u3002<\/p>\n

\"\"<\/a><\/p>\n

2\u3001\u7528\u6237\u8ba4\u8bc1\u8bbe\u7f6e<\/h2>\n

\u7528\u6237\u540d\uff1a\u4f60\u7684NordVPN\u7528\u6237\u540d
\n\u5bc6\u7801\uff1a\u8f93\u5165NordVPN\u5bc6\u7801\uff08\u786e\u8ba4\uff09\u3002
\n\u8eab\u4efd\u9a8c\u8bc1\u91cd\u8bd5\uff1a\u4fdd\u6301\u9009\u4e2d\u72b6\u6001<\/p>\n

\"\"<\/a><\/p>\n

3\u3001\u52a0\u5bc6\u8bbe\u7f6e<\/h2>\n

TLS\u914d\u7f6e\uff1a\u9009\u4e2d
\nTLS\u5bc6\u94a5\uff1a
\n-----BEGIN OpenVPN Static key V1-----
\ne685bdaf659a25a200e2b9e39e51ff03
\n0fc72cf1ce07232bd8b2be5e6c670143
\nf51e937e670eee09d4f2ea5a6e4e6996
\n5db852c275351b86fc4ca892d78ae002
\nd6f70d029bd79c4d1c26cf14e9588033
\ncf639f8a74809f29f72b9d58f9b8f5fe
\nfc7938eade40e9fed6cb92184abb2cc1
\n0eb1a296df243b251df0643d53724cdb
\n5a92a1d6cb817804c4a9319b57d53be5
\n80815bcfcb2df55018cc83fc43bc7ff8
\n2d51f9b88364776ee9d12fc85cc7ea5b
\n9741c4f598c485316db066d52db4540e
\n212e1518a9bd4828219e24b20d88f598
\na196c9de96012090e333519ae18d3509
\n9427e7b372d348d352dc4c85e18cd4b9
\n3f8a56ddb2e64eb67adfc9b337157ff4
\n-----END OpenVPN Static key V1-----
\n<\/code><\/p>\n

TLS\u5bc6\u94a5\u4f7f\u7528\u6a21\u5f0f\uff1aTLS\u8eab\u4efd\u9a8c\u8bc1
\n\u5bf9\u7aef\u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff1aNordVPN_NL120_CA;
\n\u5bf9\u7aef\u8bc1\u4e66\u540a\u9500\u5217\u8868\uff1a\u672a\u5b9a\u4e49\u3002
\n\u5ba2\u6237\u7aef\u8bc1\u4e66\uff1awebConfigurator default (59f92214095d8)(Server: Yes, In Use)\uff08\u8bf7\u6ce8\u610f\uff0c\u60a8\u8ba1\u7b97\u673a\u4e0a\u7684\u6570\u5b57\u53ef\u80fd\u4e0d\u540c\uff09\uff1b
\n\u52a0\u5bc6\u7b97\u6cd5\uff1aAES-256-GCM
\n\u542f\u7528NCP\uff1a\u9009\u4e2d\u3002
\nNCP\u7b97\u6cd5\uff1aAES-256-GCM\u548cAES-256-CBC\u3002
\n\u8ba4\u8bc1\u6458\u8981\u7b97\u6cd5\uff1aSHA512\uff08512 bit\uff09
\n\u786c\u4ef6\u52a0\u5bc6\uff1a\u65e0\u786c\u4ef6\u52a0\u5bc6\u52a0\u901f\u3002<\/p>\n

\"\"<\/a><\/p>\n

4\u3001\u96a7\u9053\u8bbe\u7f6e<\/h2>\n

IPv4\u96a7\u9053\u7f51\u7edc\uff1a\u7559\u7a7a\uff1b
\nIPv6\u96a7\u9053\u7f51\u7edc\uff1a\u7559\u7a7a\uff1b
\nIPv4\u8fdc\u7a0b\u7f51\u7edc\uff1a\u7559\u7a7a\uff1b
\nIPv6\u8fdc\u7a0b\u7f51\u7edc\uff1a\u7559\u7a7a
\n\u9650\u5236\u51fa\u7ad9\u5e26\u5bbd\uff1a\u7559\u7a7a\uff1b
\n\u538b\u7f29\uff1aNo LZO Compression [Legacy style,comp-lzo no];
\n\u62d3\u6251\uff1a\u5b50\u7f51\u2013\u516c\u5171\u5b50\u7f51\u4e2d\u6bcf\u4e2a\u5ba2\u6237\u7aef\u4e00\u4e2aIP\u5730\u5740
\n\u670d\u52a1\u7c7b\u578b\uff1a\u4e0d\u9009\uff1b
\n\u4e0d\u63a8\u9001\u8def\u7531\uff1a\u4e0d\u9009\uff1b
\n\u4e0d\u6dfb\u52a0\/\u5220\u9664\u8def\u7531\uff1a\u9009\u4e2d\u3002<\/p>\n

\"\"<\/a><\/p>\n

5\u3001\u9ad8\u7ea7\u914d\u7f6e<\/h2>\n

\u81ea\u5b9a\u4e49\u9009\u9879
\ntls-client;
\nremote-random;
\ntun-mtu 1500;
\ntun-mtu-extra 32;
\nmssfix 1450;
\npersist-key;
\npersist-tun;
\nreneg-sec 0;
\nremote-cert-tls server;
\n<\/code><\/p>\n

UDP\u5feb\u901f I\/O\uff1a\u9009\u4e2d\uff1b
\n\u53d1\u9001\/\u63a5\u6536\u7f13\u51b2\u533a\uff1a\u9ed8\u8ba4
\n\u7f51\u5173\u521b\u5efa\uff1a\u4ec5IPv4
\n\u4fe1\u606f\u7ea7\u522b\uff1a3\uff08\u63a8\u8350\uff09\uff1b<\/p>\n

\"\"<\/a><\/p>\n

\u56db\u3001\u5206\u914d\u63a5\u53e3<\/h1>\n

\u5bfc\u822a\u5230Interfaces\u00a0->\u00a0Interface Assignments\uff0c\u7136\u540e\u6dfb\u52a0NordVPN NL120\u63a5\u53e3\u3002\u6253\u5f00\u521a\u624d\u5206\u914d\u7684\u63a5\u53e3OPT1\uff0c\u586b\u5199\u4ee5\u4e0b\u4fe1\u606f\uff1a<\/p>\n

\u542f\u7528\uff1a\u9009\u4e2d
\n\u8bf4\u660e\uff1aNordVPN
\nMac\u5730\u5740\uff1a\u7a7a\u767d
\nMTU\uff1a\u7a7a\u767d
\nMSS\uff1a\u7a7a\u767d<\/p>\n

\"\"<\/a><\/p>\n

\u4e0d\u8981\u4fee\u6539\u5176\u4ed6\u4efb\u4f55\u5185\u5bb9\uff0c\u6eda\u52a8\u5230\u5e95\u90e8\uff0c\u70b9\u51fb\u201c\u4fdd\u5b58\u201d\u3002<\/p>\n

\u4e94\u3001\u8bbe\u7f6eDNS\u89e3\u6790<\/h1>\n

1\u3001\u5e38\u89c4\u8bbe\u7f6e<\/h2>\n

\u5bfc\u822a\u5230Services\u00a0->\u00a0DNS Resolver\u00a0->\u00a0General Settings\uff0c\u586b\u5199\u4ee5\u4e0b\u53c2\u6570\uff1a<\/p>\n

\u542f\u7528\uff1a\u9009\u4e2d
\n\u4fa6\u542c\u7aef\u53e3\uff1a\u4fdd\u7559\u9ed8\u8ba4
\n\u542f\u7528S\u200b\u200bSL\/TLS\u670d\u52a1\uff1a\u4e0d\u9009
\nSSL\/TLS\u8bc1\u4e66\uff1awebConfigurator default (59f92214095d8)(Server: Yes, In Use)\u00a0\uff08\u8bf7\u6ce8\u610f\uff0c\u60a8\u8ba1\u7b97\u673a\u4e0a\u7684\u6570\u5b57\u53ef\u80fd\u4e0d\u540c\uff09\uff1b
\nSSL\/TLS\u4fa6\u542c\u7aef\u53e3\uff1a\u4fdd\u7559\u9ed8\u8ba4
\n\u7f51\u7edc\u63a5\u53e3\uff1a\u5168\u90e8
\n\u4f20\u51fa\u7f51\u7edc\u63a5\u53e3\uff1aNordVPN
\n\u7cfb\u7edf\u57df\u672c\u5730\u533a\u57df\u7c7b\u578b\uff1a\u900f\u660e
\nDNSSEC\uff1a\u4e0d\u9009
\nDNS\u67e5\u8be2\u8f6c\u53d1\uff1a\u9009\u4e2d
\nDHCP\u6ce8\u518c\uff1a\u9009\u4e2d
\n\u9759\u6001DHCP\uff1a\u9009\u4e2d<\/p>\n

\u8bbe\u7f6e\u5b8c\u6210\u540e\uff0c\u70b9\u51fb\u5e95\u90e8\u7684\u4fdd\u5b58\u3002<\/p>\n

\"\"<\/a><\/p>\n

2\u3001\u9ad8\u7ea7\u8bbe\u7f6e<\/h2>\n

\u5bfc\u822a\u5230Services\u00a0->\u00a0DNS Resolver ->Advanced Settings\uff0c\u7136\u540e\u586b\u5199\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n

\u9ad8\u7ea7\u9690\u79c1\u9009\u9879\uff1a<\/p>\n

\u9690\u85cf\u8eab\u4efd\uff1a\u9009\u4e2d
\n\u9690\u85cf\u7248\u672c\uff1a\u9009\u4e2d<\/p>\n

\u9ad8\u7ea7\u89e3\u6790\u5668\u9009\u9879\uff1a<\/p>\n

\u9884\u53d6\u652f\u6301\uff1a\u9009\u4e2d
\n\u9884\u53d6DNS\u5bc6\u94a5\u652f\u6301\uff1a\u9009\u4e2d<\/p>\n

\u70b9\u51fb\u5e95\u90e8\u7684\u4fdd\u5b58\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u516d\u3001\u51fa\u7ad9NAT\u8bbe\u7f6e<\/h1>\n

\u5bfc\u822a\u5230Firewall\u00a0->\u00a0NAT\u00a0->\u00a0Outbound\uff0c\u7136\u540e\u9009\u62e9\u624b\u52a8\u51fa\u7ad9NAT\u89c4\u5219\u751f\u6210\uff0c\u70b9\u51fb\u4fdd\u5b58\u3002\u7136\u540e\u5c06\u51fa\u73b0\u56db\u4e2a\u89c4\u5219\u3002\u4fdd\u7559\u6240\u6709\u89c4\u5219\uff0c\u5e76\u6dfb\u52a0\u4e00\u4e2a\u65b0\u89c4\u5219\u3002
\n\u63a5\u53e3\uff1a\u9009\u62e9NordVPN\uff1b
\n\u6e90\uff1aLAN\u5b50\u7f51\uff1b
\n\u70b9\u51fb\u4fdd\u5b58\uff0c\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u4e03\u3001\u4fee\u6539\u9632\u706b\u5899\u89c4\u5219<\/h1>\n

\u5bfc\u822a\u81f3Firewall\u00a0->\u00a0Rules\u00a0->\u00a0LAN\uff0c\u5220\u9664IPv6\u89c4\u5219\u3002\u7f16\u8f91\u73b0\u6709\u7684IPv4\u89c4\u5219\u3002\u627e\u5230\u89c4\u5219\u8bbe\u7f6e\u9875\u9762\u7684\u663e\u793a\u9ad8\u7ea7\u9009\u9879 \uff0c\u5c06\u7f51\u5173\u66f4\u6539\u4e3aNordVPN\uff0c\u51fb\u4fdd\u5b58\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u516b\u3001\u8bbe\u7f6eDNS<\/h1>\n

\u8f6c\u5230System\u00a0->\u00a0General Setup\uff0c\u586b\u5199DNS\u4fe1\u606f\uff1a<\/p>\n

DNS\u670d\u52a1\u56681\uff1a103.86.96.100\uff1bnone
\nDNS\u670d\u52a1\u56682\uff1a103.86.99.100;\u00a0NordVPN_VPNV4-\u2026<\/p>\n

\u70b9\u51fb\u4fdd\u5b58<\/p>\n

\"\"<\/a><\/p>\n

\u4e5d\u3001\u67e5\u770bVPN\u72b6\u6001<\/h1>\n

\u5bfc\u822a\u5230Status -> OpenVPN\uff0c\u53ef\u4ee5\u770b\u5230\u670d\u52a1\u72b6\u6001\u6b63\u5e38\uff0c\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u4e5f\u53ef\u4ee5\u5728Status\u00a0->\u00a0System Logs\u00a0->\u00a0OpenVPN\u4e0b\u68c0\u67e5\u8fde\u63a5\u65e5\u5fd7\u6587\u4ef6\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u73b0\u5728\uff0c\u4f60\u7684pfSense\u5df2\u7ecf\u4e0eNord VPN\u5efa\u7acb\u4e86\u6b63\u786e\u7684\u8fde\u63a5\u3002<\/span><\/p>\n

\n

\u5341\u3001\u53ef\u9009\u8def\u7531\u8bbe\u7f6e<\/h1>\n<\/div>\n
\n
\n

\u5982\u679c\u5185\u7f51\u7684\u67d0\u4e9b\u8bbe\u5907\u6216\u8ba1\u7b97\u673a\u4e0d\u9700\u8981\u8fde\u63a5VPN\u8fdb\u884c\u8bbf\u95ee\uff0c\u5219\u5fc5\u987b\u8bbe\u7f6epfSense\u53ef\u9009\u8def\u7531\u3002\u6ce8\u610f\uff1a\u5728\u8bbe\u7f6e\u53ef\u9009\u8def\u7531\u4e4b\u524d\uff0c\u5fc5\u987b\u5728\u524d\u9762\u7684VPN\u5ba2\u6237\u7aef\u201c\u96a7\u9053\u8bbe\u7f6e\u201d\u90e8\u5206\uff0c\u9009\u4e2d\u201cDon’t pull routes(\u4e0d\u63a8\u9001\u8def\u7531)\u201d\u3002<\/p>\n

1\u3001\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219<\/h2>\n

\u5bfc\u822a\u5230Firewall \u2192 Rules \u2192 LAN\u3002<\/p>\n

\u5355\u51fb\u6dfb\u52a0\u65b0\u89c4\u5219\u3002\u4fee\u6539\u4ee5\u4e0b\u8bbe\u7f6e\uff1a<\/p>\n

\u52a8\u4f5c\uff1aPass
\n\u63a5\u53e3\uff1aLAN
\n\u534f\u8bae\uff1aany
\n\u6e90\uff1a\u5355\u4e3b\u673a\u6216\u60a8\u5e0c\u671b\u4eceVPN\u96a7\u9053\u6392\u9664\u7684\u522b\u540d\u2192\u8bbe\u5907\u7684IP\u5730\u5740\u3002\uff08\u60a8\u4e5f\u53ef\u4ee5\u586b\u5199\u6574\u4e2a\u5b50\u7f51\uff0c\u4e5f\u53ef\u4ee5\u586b\u5199IP\u5730\u5740\u8303\u56f4\uff09
\n\u7f51\u5173\uff1aWAN_DHCP<\/p>\n

\"\"<\/a>
\n\"\"<\/a><\/p>\n

\u4fdd\u5b58\u66f4\u6539\u540e\uff0c\u89c4\u5219\u5217\u8868\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

2\u3001\u8c03\u6574\u51fa\u7ad9\u8bbe\u7f6e<\/h2>\n

\u5728\u5b8c\u6210\u53ef\u9009\u8def\u7531\u8bbe\u7f6e\u540e\uff0c\u5fc5\u987b\u5bfc\u822a\u81f3Firewall \u2192 NAT \u2192 Outbound\uff0c\u6839\u636e\u4e0b\u56fe\u91cd\u65b0\u8c03\u6574\u201c\u6620\u5c04\u201d\uff1a\"\"<\/a><\/p>\n

3\u3001\u91cd\u7f6e\u9632\u706b\u5899\u89c4\u5219<\/h2>\n

\u4fdd\u5b58\u5e76\u5e94\u7528\u66f4\u6539\u3002\u5bfc\u822a\u5230Diagnostics \u2192 States \u2192 Reset States\uff0c\u9009\u4e2dReset the firewall state table(\u91cd\u7f6e\u9632\u706b\u5899\u72b6\u6001\u8868)\u00a0\u2192Reset(\u91cd\u7f6e\uff09\u3002<\/p>\n

\u73b0\u5728\u53ef\u4ee5\u901a\u8fc7IP\u68c0\u67e5<\/a>\u7f51\u7ad9\uff0c\u6765\u67e5\u770b\u6307\u5b9a\u8bbe\u5907\u662f\u5426\u901a\u8fc7ISP\u8fde\u63a5\u8fdb\u884c\u8def\u7531\uff0c\u800c\u5176\u4ed6\u8bbe\u5907\u662f\u5426\u901a\u8fc7VPN\u96a7\u9053\u8fdb\u884c\u8def\u7531\u3002<\/p>\n

\u539f\u6587\u5730\u5740<\/a><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Nord VPN\u662f\u4e00\u5bb6\u8457\u540d\u7684VPN\u63d0\u4f9b\u5546\uff0c\u5b83\u63d0\u4f9b\u7684VPN\u670d\u52a1\u53ef\u4ee5\u4fdd\u62a4\u4f60\u7684\u7f51\u7edc\u5b89\u5168 … \u7ee7\u7eed\u9605\u8bfb →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28],"tags":[118],"class_list":["post-4491","post","type-post","status-publish","format-standard","hentry","category-pfsense","tag-nord"],"_links":{"self":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/4491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4491"}],"version-history":[{"count":0,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/4491\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4491"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}