How to Configure & Use NordVPN on pfSense 2.4.4

NordVPN easily works on pfSense firmware-based routers. All you have to do is configure the OpenVPN client of it on your router and get started. Here we've provided a step-by-step guide to help you configure NordVPN on pfSense 2.4.4. Have a look.

Note

If you're using pfSense 2.4.5, check this guide. For pfSense 2.5, check this NordVPN installation process.

1. First, visit the NordVPN website.

2. Next, hit the Grab the Deal button and choose a VPN subscription on the upcoming screen.

3. You need to fill in the required details to complete your purchase.

4. Once done, you'll get a confirmation on your subscription.

5. Now, open your pfSense router login page and choose System.

6. Go to Certificate Manager next and click CAs.

7. Hit the +Add button after that, and the below Edit screen will appear.

8. Next, click here to note the server hostname of the one in your preferred location.

9. Now, fill in the details on your router's web page as mentioned below-

Descriptive Name: Enter the NordVPN browser name
Method: Choose Import an existing Certificate Authority
Certificate data: Enter the below script-

10. Now, hit the Save button.

11. Navigate to VPN> OpenVPN> Clients next and choose +Add.

12. Fill in the details mentioned below-

Disable this client: Uncheck
Server mode: Choose Peer to Peer (SSL/TLS)
Protocol: Select UDP on IPv4 only (you can also use TCP)
Device mode: tun – Layer 3 Tunnel Mode
Interface: Choose WAN
Local port: Leave blank
Server host or address: Enter the NordVPN server name
Server port: 1194 (use 443 in case of TCP)
Proxy host or address: Blank
Proxy port: Blank
Proxy Authentication: None
Description: Any name

User Authentication Settings

Username:
Password:

Note

You can find the credentials for this field in your online NordVPN account under Service credentials (manual setup).

Authentication Retry: Uncheck

Cryptographic Settings

TLS Configuration: Check
TLS Key: Enter the below script-

-----BEGIN OpenVPN Static key V1-----
e685bdaf659a25a200e2b9e39e51ff03
0fc72cf1ce07232bd8b2be5e6c670143
f51e937e670eee09d4f2ea5a6e4e6996
5db852c275351b86fc4ca892d78ae002
d6f70d029bd79c4d1c26cf14e9588033
cf639f8a74809f29f72b9d58f9b8f5fe
fc7938eade40e9fed6cb92184abb2cc1
0eb1a296df243b251df0643d53724cdb
5a92a1d6cb817804c4a9319b57d53be5
80815bcfcb2df55018cc83fc43bc7ff8
2d51f9b88364776ee9d12fc85cc7ea5b
9741c4f598c485316db066d52db4540e
212e1518a9bd4828219e24b20d88f598
a196c9de96012090e333519ae18d3509
9427e7b372d348d352dc4c85e18cd4b9
3f8a56ddb2e64eb67adfc9b337157ff4
-----END OpenVPN Static key V1-----

TLS Key Usage Mode: TLS Authentication
Peer certificate authority: NordVPN_NL120_CA
Peer Certificate Revocation list: No need to define
Client certificate: Choose webConfigurator default (59f92214095d8)
Encryption Algorithm: AES-256-GCM
Enable NCP: Check
NCP Algorithms: AES-256-GCM and AES-256-CBC
Auth digest algorithm: SHA512 (512-bit)
Hardware Crypto: Pick No Hardware Crypto Acceleration

Tunnel Settings

IPv4 tunnel network: Blank
IPv6 tunnel network: Blank
IPv4 remote network(s): Blank
IPv6 remote network(s): Blank
Limit outgoing bandwidth: Blank
Compression: Choose No LZO Compression [Legacy style,comp-lzo no]
Topology: Pick Subnet – One IP address per client in a common subnet
Type-of-service: Uncheck
Don’t pull routes: Uncheck
Don’t add/remove routes: Check

Advanced Configuration

Custom Options: Enter the below script-

tls-client;
remote-random;
tun-mtu 1500;
tun-mtu-extra 32;
mssfix 1450;
persist-key;
persist-tun;
reneg-sec 0;
remote-cert-tls server;

UDP FAST I/O: Uncheck
Send/Receive Buffer: Default
Gateway creation: IPv4 only
Verbosity level: Select 3 (recommended)

13. When done, move to Interfaces> Interface Assignments and Add the NordVPN NL120 to the list.

14. Now, hit OPT1 and fill in the below details-

Enable: Check
Description: NordVPN
Mac Address: Blank
MTU: Blank
MSS: Blank

15. No need to change anything else; just scroll down and click Save.

16. Now, move to Services> DNS Resolver> General Settings and enter the below details-

Enable: Check
Listen port: No need to change
Enable SSL/TLS Service: Uncheck
SSL/TLS Certificate: webConfigurator default (59f92214095d8)
SSL/TLS Listen Port: No need to change
Network Interfaces: All
Outgoing Network Interfaces: NordVPN
System Domains Local Zone Type: Transparent
DNSSEC: Uncheck
DNS Query Forwarding: Check
DHCP Registration: Check
Static DHCP: Check

17. Next, click Save.

18. In DNS Resolver, choose Advanced Settings and fill in the below details:

Advanced Privacy Options:

Hide Identity: Check
Hide Version: Check

Advanced Resolver Options:

Prefetch Support: Check
Prefetch DNS Key Support: Check

19. Next, click Save.

20. You need to navigate to Firewall> NAT> Outbound next and click Manual Outbound NAT rule generation.

21. Hit Save

22. Four rules will appear now; add a new one-

Interface: NordVPN
Source: LAN subnet
Click Save

23. Now, move to Firewall> Rules> LAN to delete the IPv6 rule.

24. Edit the IPv4 rule next.

25. For that, click Show Advanced Options, change the Gateway to NordVPN and click Save.

26. Now move to System> General Setup and enter the below details-

DNS Server 1: 103.86.96.100; none
DNS Server 2: 103.86.99.100; NordVPN_VPNV4-…

27. Click Save.

28. After that, move to Status> OpenVPN, and the services should be up.

That’s all! Now you know how to configure and use NordVPN on pfSense 2.4.4. If you have further queries, drop us a comment through the below button. Thanks for reading!