1. Login into the Pfsense admin portal
    2. Go to "System" -> "Package Manager"

  1. Go to "Available Packages" and install 
  2. Install the latest version of "freeradius" and "openvpn-client-export"

  1. Go to "Services" -> FreeRADIUS" -> "Interfaces" -> "Add"
  2. Don't change the default and save

 

  1. Go to "Services" -> FreeRADIUS" ->  "NAS / Clients"  -> "Add"
  2. Enter the following information
    1. Client IP Address = 127.0.0.1
    2. Client Shortname = Pfsense
    3. Client Shared Secret =<Create a shared secret>

 

For the reset of the setting leave them as is.

 

  1. Go to "VPN" -> "OpenVPN" -> Wizard"
  2. For the server type chose "RADIUS" and click "Next"

 

  1. For the "RADIUS Authentication Server Parameters" enter the following
    1. Name = Pfsense
    2. Hostname or IP address = 127.0.0.1
    3. Authentication Port = 1812
    4. Shared Secret =  <Client Shared Secret>

Click "Next"

 

  1. For CA chose "FreeRADIUS CA" and click "Next"

 

  1. For Certificate choose "FreeRADIUS" Server Certificate and click "Next"

 

 

  1. Enter the following
    1. Endpoint configuration
      1. Protocol = UDP on IPv4 only
      2. Interface = WAN
      3. Local Port = 1194

 

  1. Cryptographic Settings
    1. Leave as is

 

  1. Tunnel Settings
    1. IPv4 Tunnel Network = 10.0.8.0/24
    2. Redirect IPv4 Gateway = Disable
    3. IPv4 Local Network = <The local LAN Subnet>
    4. Leave the reset setting as is

 

  1. Client Settings
    1. Leave as is

 

  1. Advanced Clients Setting
    1. DNS Default Domain = <AD domain>
    2. DNS Server 1 = <DC IP>
    3. Enter more DNS / NTP server as you see fit.
    4. Leave the reset as is

  1. Enable the creation of "Firewall rule and OpenVPN rule" and click "Next" 

 

  1. Click "Finish"


In order to check your new SSL VPN create a user and try to login.