@Trel:

I haven't used the captive portal in ages, but is there a logout button/page that maybe that machine's browser is prefetching?

Itb is already push-out by a jaca script when login succeded (if set to do so).

But a button needs to be pressed to actually logout.
This would show up in the captive portal log.

Right now, I guess "LOGOUT's aren't seen in the portal log.
So 'something' is resetting the portal firewall (the tables ipfw that contain the allowed client IP's).

@Gertjan:

Source ?

It was a reply to something on reddit.  It's not a source.  That's why I'm asking if there's anything accurate about that.

The portal log shows connect and disconnect messages ?
Any other messages ?

Drop in over here https://forum.pfsense.org/index.php?topic=69606.0and check if that is your issue.

Router, Firewall/PFsense reside in the same segment. They meet at the switch.  Captive portal is implemented in one of the VLAN . Whenever I enable the portal printing does not work and this is is windows.

Also another finding is that when I used Sonicwall,  mac address filtering is working without using SOnicwall as the default gw for client. But when I use PFSense and enable portal mac filtering is not working it always prompt for username and password.

Client is not connecting in public network they are connected on the lan network.

Can you advise me on this.

hi thanks for the sulucion also had that detail …

U have issue with some browsers?

I had use on desktop:

firefox
chrome
iexplore

Android working to.

Thanks someone give us ideas, we will work on this one, the code is there :-).

Hi,
@eyp:

I'm testing Captive Portal function but I dont understand how the user autenticated can navigate through the firewall.

I think a better answer is possible  ;)

If your captive portal is being called "zone1" (visible on the Status => Captive Portal page) then this command:
ipfw -x zone1 table all list
will list the tables with all permitted users.
Table 1 and 2 contain the IP and MAC of every authenticated captive portal user .

Hello,
@ChristianViana:

I´d like to use the DHCP list to create a pass-through list on Captive Portal.

I understand.
The information put into the DHCP leases table can also be set on the pass-through-MAC tab on the Captive Portal settings page.

@ChristianViana:

Can I do this?

I don't know  ;)
You tried it ?

Hi,

I use "Enable per-user bandwidth restriction" (checked) - using these settings: 2500 (Kbits upload) and 700 (Kbits download).
It works pretty well for me, when I test speed limits with my iDevice.

Slow portal behavior seems more a DNS issue to me.

I remember seeing that when add MAC on the "pass-through-MAC" page, the speed settings over there aren't taken in account (bug ?!).

Hi,

I am experiencing the same issue right now on my captive portal radius authentication setup.

I am getting an error every time I try to re-login for the second time, first time produces an error. This is the error:

Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 4294967295 bytes) in /etc/inc/radius.inc on line 446

I've tried to follow you "too long" secret key suggestion but it did not work for me. Anyway, maybe you have some other idea about what might be causing that error.

thank you Gertjan for your reply, user is connected to the internet after i tested your advice but a error page is appears after logging in :(
anyway i tried another method by created a new page only contain a green right mark logo with done below then uploaded as (Logout page contents) and activated (Enable logout popup window) feature, it is working properly as i want .

thank you again

@Gertjan:

@gregoryzero:

DHCP-server log shows this:

dhcpd: send_packet: Permission denied Failed to send 300 byte long packet over bce1_vlan30 interface

Well, that's clear enough.

I guess: undo all the vlan-stuff and all starts working. Start digging in that direction.

It seems, that everything will be easier…
I applied the 2.1.4 update and it seems, that this issue has been resolved.
Thanks everyone for help.

I can't think of how you would accomplish this without either…

1.) turning on DHCP at the access point
2.) adding another interface to pfSense to connect the AP to
3.) adding a managed switch and creating a VLAN (not sure steps, but think you could do it.) attaching the AP to the appropriate port.

Hi there.

Your post is missing some info.

What does this command show you:
ipfw -x zone1 show

and this one:
ipfw -x zone1 table all list

Note 'zone1' should be the name of your zone - as shown on the Service :: Captive portal or Status :: Captive portal

Tell us a little bit more about your setup.

While you're at it, 2.1.3 is old (login to pfSEnse and it will tell you so) => upgrade.

Hi,

"offline generating" of vouchers as such is not possible, pfSense needs to now somehow which vouchers are valid and which are not…

Maybe setting up a VPN to the pfSense-Box could help? Someone created a REST API for pfSense Vouchers (http://blog.digitalhigh.es/pfsense-voucher-rest-api/), you could build something on top of that, but you still need access to pfsense though…

Best regards (or "Viele Grüße"  ;)),
Eagle2