- Navigate to Firewall | NAT.
- If the Port Forward tab isn't selected by default, click on Port Forwarding:
- Click on the Add button with the down arrow to add a new port forwarding rule.
- Leave the Interface set to WAN:
- Leave the Protocol set to TCP.
- For Destination port range, select SSH in the From port drop-down box.
- In the Redirect target IP text field, enter 192.168.2.2.
- For Redirect target port, select SSH in the Port drop-down menu.
- You can enter a brief description in the Description edit box (for example, NAT rule for Raspberry Pi):
- Leave Filter rule association set to Add associated filter rule.
- Click on the Save button when done.
- Click on the Apply Changes button.
Selecting SSH in the drop-down menus for destination port range and redirect target port causes pfSense to insert the default SSH port (22) as the port to which the rule applies. You could also enter 22 in the adjacent edit box and it would have the same effect.