Hi, You are telling nothing about your setup, so I'll explain using mine as an example. First of all, it's impossible to get rid of IP's. They will always exists  ;) My captive portal lives on OPT1 - I'm using LAN for my own needs. I'm using the DNS Resolver. On the setup page of the DNS Resolver, I added a Host "Override". My OPT1 interface address is 192.168.2.1/24 (LAN is 192.168.1.1/24). I added : Host : portal Domaine : my-domain.net IP 192.168.2.1 Description : Whatever you want. Know that declaring a host for a domain will not force your clients to use the this name … The captive portal is hard coded to use the interface address IP when working with "http mode". https mode will (have to !) change that. Now, the funny part : you have to switch to HTTPS login on the captive portal page. As a domain name you chose your "portal.my-domain.net". And ... you have to chose a certificate that your clients will accept (the Let encrypt acme package can help you here).

@beerten: Is it possible to import the vouchers into the external database? Generate vouchers, import them into the external database into a seperate table. Select on when required and mark it as used. Just a thought You saw https://forum.pfsense.org/index.php?topic=133872.msg736484#msg736484 ?

has this been done?

@Gertjan: See here : Captive Portal Troubleshooting : Issue : Captive portal not redirecting : first answer :) Yep, I did read that one. It might even have triggered the solution. To me it is not clear it says one should define a local dns server. Could have to do with me, not being an english native speaker. Or my knowledge about DNS resolving is not what it should be. I posted my solution for the sake of the search function. I so a lot of topics on similar problems I had. But I could not find the solution.

Would appreciate some help!

@Gertjan: Your AP has its DHCP server shut down, router-mode is shut down, etc ? Yes, it is in AP mode. It offers quite a few modes. AP Mode AP router Client Router WDS Bridge WDS Router and I think a few others, at any rate its in AP mode. Also, the Mac addresses are shown in PFsense DHCP lease lists, however when the captive portal is on with the Mac pass through, it lets every device passthrough with the first logged in user. @Derelict: Any AP does. If that one is not it is either in a router mode, not an AP mode, or is for some reason proxying ARP or something of that nature. In either case you are probably going to get a faster reply asking on a forum specific to that product. I didn't know those existed lol, will do.

It depends on how the solution was made. What we'd like to see is: 1. Captive Portal adapted to use all settings from the User Manager, including defined Authentication Servers 2. Additional RADIUS settings moved from Captive Portal to the User Manager Auth Server RADIUS options where possible. Some settings may be specific to one portal and not others, but an admin could always define multiple RADIUS server profiles in the user manager to get the same effect, which is essentially what they're already doing now. In doing that, Captive Portal would naturally pick up LDAP support as an authentication source without actually adding or touching any LDAP-specific code. The problem is adapting all of the RADIUS options in CP to the User Manager and making sure they are used in the correct context.

That is not currently a feature of FreeRADIUS on pfSense, and there are no plans for it. You might have better luck asking for help on a FreeRADIUS forum/mailing list/subreddit/etc, because anything you need to change would be specific to FreeRADIUS and not pfSense.

Month or two is probably not something you want to task your firewall for. Yes, that can be increased. Whether it is enough depends on how much device churn you are expecting.

jimp this is the test for free radius i did when i get the above failed radius message. i am also sending the test result. user:  shaheedullah Password: school sgared secret : cmc  

New learnings sir! :D :D :D I actually didn't know that I can view the voucher number including the time remaining per voucher. As I randomly checked 10 vouchers from the previously generated voucher, all are fine. Maybe, there were some which are considered invalid. Anyways, thank you so much sir's for your help!

@yfarouq: @jimp: Not nearly enough detail here. What did you upgrade from? What did you upgrade to? What version of the FreeRADIUS package do you have installed now? Im at pfsense 2.3.4 version, and Im still working with freeRadius2. I had tested FreeRadius3 but the same issues Please answer all of the questions there. the first two are asking about pfSense versions before/after.

I try Radius 3 also, but it seems to be the same. I try to check with the Log, but it shows nothing

Under normal conditions it will start automatically. You will have to provide more detail about your specific configuration, including: Which FreeRADIUS version? If it's 2.x, uninstall that and install 3.x and try again. How is FreeRADIUS configured? You mentioned MySQL, is it supposed to use that? What other options do you have enabled? Show any radiusd log messages from the system log during boot time If nothing else, you can install the service watchdog package and have it babysit FreeRADIUS to keep it running.