@bear410hk:

I dont know it is a bug or only my setting problem.
anyone know what the problem in my case ?

Thousands, no billions of people are using the captive portal every day.
Another use number are those using IE11.
So, that rules out the non-capabilities of pfSense : it works (for years now).

The only thing we - and you as it seems - don't know is : how did you set it up ?
For example : Using the build in logging page : it will work - you made your own and something is broken … so ;)
Tell us more, and we might be able what you should or shouldn't do.

@androhit:

Can anyone plz guide me to build this functionality in php or html

'html' (or even php if you which) is need to make your own login page, the one you upload here : Services => Captive Portal => [YOUR ZONE] => Configuration.

Then, have a look at /usr/local/captiveportal/index.php : the file that uses your upload 'htmlt' file.
And, as you can see in this "/usr/local/captiveportal/index.php", this file will tell you everything : /etc/inc/captiveportal.inc - that's will be be the place where  you 'interface' with the "Local user manager".

So, two things : you should definitely know something about php, so you can read how things are done, and you will wind up having the knowledge to be able to  change the current system to something that needs YOUR typical needs.

@maxkoning:

What can be the cause of this??

I tend to say : nuke your VLAN setup first - go for a simple basic "always works setup" :
Use LAN for your own purposes and the next interface, OPT1 (or whatever you named it) as a dedicated Portal interface.
This will give you a setup that works in a couple of minutes.

If not :
Check who is present (inserted into the firewall) :
https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting

Check out table 1 & 2 ( using "ipfw -x 2 table 1 list" and "ipfw -x 2 table 2 list" as mentioned in the doc).
Your WIN clients are present ?

If not :
"We" from this forum can not see your setup. So, you have to detail your setup, so we might say something useful.
Example  These WIN clients : they received an DHCP (!) IP ? Gateway ? DNS ? What were these ?
What is the portal IP ? DHCP server ?
etc etc.

Make sure this tag is not missing inside the form tag of your login page. I use Calvin's as well, it used to work on the 2.2 version, for it to work on 2.3 you must add the tag.

Hello,

Everything is 'done' by PHP right now.
PHP can be executed on the command line, and accepts parameters.

Up to you to write these PHP CLI scripts ….

@ghislain:

it work for the html index page but not find css, png background: file manager do not put it on /usr/local/www/ but in /var/db/cpelements

Why are you looking in /var/local/www/ ? That this the home dir for the GUI.
The one for the captive portal is here : /usr/local/captiveportal (you should know that nginx is running with one instance for the GUI, and another for the Captive portal and yet another one if you have the https version of the Captive portal - check out config files for nginx here : /var/etc - check files that start with nginx- )
…. and the surprise is :
In that directory you will find your "index.php" and soft links to the files you upload with the file manager.
Like (my setup) :

[2.3.3-RELEASE][admin@pfsense.brit-hotel-fumel.net]/usr/local/captiveportal: ls -al total 40 drwxr-xr-x  2 root  wheel    512 Mar 14 09:45 . drwxr-xr-x  16 root  wheel    512 Apr 13 22:00 .. lrwxr-xr-x  1 root  wheel    39 Oct 16  2015 captiveportal-bg.jpg -> /var/db/cpelements/captiveportal-bg.jpg lrwxr-xr-x  1 root  wheel    59 Jan 29  2015 captiveportal-logo_brit_hotel_relief.jpg -> /var/db/cpelements/captiveportal-logo_brit_hotel_relief.jpg lrwxr-xr-x  1 root  wheel    42 Jan 29  2015 captiveportal-style.css -> /var/db/cpelements/captiveportal-style.css -rw-r--r--  1 root  wheel  11603 Feb 11 14:50 index.php -rw-r--r--  1 root  wheel  10434 Feb 11 14:50 radius_accounting.inc -rw-r--r--  1 root  wheel  6862 Feb 11 14:50 radius_authentication.inc

So, the files used by my index.php -  captiveportal-bg.jpg - captiveportal-logo_brit_hotel_relief.jpg - captiveportal-style.css are perfectly well readable.

This is how it works for years now - still don't know why it doesn't for you.

@AYSMAN:

give a sample php where the captive portal will authenticate using an existing MySQL Database.

This was -years- ago.
And of course, I'm not such an approach anymore.

So, first : activate MySQL in the PHP setup (your call).
Then : understand where to add the "couple of lines" (some insight knowledge about how the captive portal auth is done).
Then : know how to connect to a MySQL database.
Know how to extract some data from a database -> table - and close the database.
If there was ONE matching result, then grant access.

Understand : you're are asking to patch the pfSense code (no problem, it can be done) - in that case YOU should be able to read that code, and why you are patching. The final phase : write up and test the patch is just a formality.

Any hints?
:'(

What do pass-through credits have to do with anything?

If you want to create a 6-hour voucher, create a roll of 6-hour vouchers.

If you want to use pass-through credits, use those.

If you want to use usernames/passwords and timeouts, use those.

You could probably achieve it with a cURL command back to your own server.

I use a cURL command to let me know if the Syslog box is online when a user connects to the CP.

One of my customers recently wanted to simplify their captive portal, so I'm setting up a system where there will be a generic password that changes every quarter. Then simply protect a "no authentication" page using the php script, they enter password, agree to t&c's and get online.

You could do the same, all the script does is get the current month, and checks the password against an array.

Hard to say without more details what you are doing wrong. Start testing all those things, copying, and pasting I guess.

I just turned up a captive portal and it worked fine. Had to pass 8.8.8.8 if the clients were configured to use that for DNS. Did not have to pass the local interface address in the CP.

Note that the traffic has to pass both CP and the interface rules to work.

Concentrate on DNS. figure out why users cannot resolve names unless CP is off.

It will also be interesting to know how your adventure goes, please keep us posted what you have found/implemented and if it worked in your scenario.

Cheers!

No, that is not possible.

Hi.

This would be more then 'configuring'.
Using the radius setup and you will gave the "per user bandwith and quota".
But … you initial login should send "something" to the radius setup so a user can chose his "settings". That needs coding.

Make that : https://www.google.com