Thanks for the confirmation. (looks like I'll have to do some convincing to get some $$$ allocated).

@broncoBrad: Is there any way to combine it into one login maintaining that level of encryption/security? I don't really want to be giving my wireless AP password out. I mean it's not that big of a deal, but if I'm going to give out the AP password I mind as well just use captive portal as a bandwidth limiter instead of user login. Thoughts? I think you can still have WPA encryption without having to have an AP password. Some wireless hardware support 1 or more AP's, so you can have a guest AP with the captive portal and segregate that from your LAN. So in essence it doesn't matter if you have to give out your guest AP password.

Hi, I have been used an Ipad 2 (iOs 4.3.5) with the CP and everything worked fine. @puka1: When you connect to your wireless network on your ipad it automatically brings up a splash screen to sign in. I then enter my password (my user is set by default in the splash page). This didn't happen to me with pfsense CP, but with other CP it happens. When i attempt to navigate in safari, I became redirected to the CP page and after loggin I can navigate without problems.

this can be marked as solved, I did some further digging and what I found was that the mac address of the user that was logged in DID NOT match my laptop wireless adapter MAC address, it matched the WAP instead, so I had to use the option "DISABLE MAC FILTERING", which for me is ok as I won't be using "PASS-THROUGH MAC"

Basically, I have a guest user that has a userid of 2001.  I put this script in the /etc folder as rc.password.guest and made a cron job to execute it weekly.  I have added a little bit to the end of the script that emails this guest password to a distribution list, so our conference room admins have the password every week.  They give it out to vendors and guests so they can use wireless in the conference rooms.

Did u try the proxy server Squid?

My RC3 portal also stopped working just after I upgraded from RC2, and I've been pulling out my hair (as well as my managers pulling my hair) trying to get it fixed.  Turns out I just needed to add the auth_voucher as a hidden input, even though I'm not using it, and it started working again. Thanks for the hints, I figured it was worth a try!

thank you jimp!

@knight313: I know that this is old topic but I met this issue and solved with these steps. On the interfaces WAN page unchecked  FTP Helper and changing firewall automatic outbound NAT to Manual . thanks for the reply.  FTP helper has 3 options, do i un-check all 3?

Captive Portal in pfSense 2.0 is enabled/disabled on individual interfaces. If your AP is a pfSense interface you can enable CP on that interface. (I use CP this way.) If your AP is external to pfSense then you can enable CP on the interface connecting to the AP. If you have an external AP do you want to have different firewall rules for WiFi devices and wired devices? If so, its probably most convenient for them to have separate interface on pfSense.

hey guys, i was just gonna start a new thread with the same question but i searched this. Is this possible in 2.0?

The page looks ok though i do not think you need the two submits/forms and only one redirurl is ok if you collapse together. About radius or vouchers presently no, it cannot be done. Hopefully it will make 2.1. You can hack the code to allow this if you want.

Should be back now. https://github.com/bsdperimeter/pfsense/commit/985d6e18ebe3f2c2efe200032130e093b9b110f8

Only in 2.0 you can do that.

If you just want to be able to reach the web interface of the captive portal, its port 80.

Having the same problems on pfSense 2.0 RC3 (using the pfSense-2.0-RC3-1g-i386-20110621-1821-nanobsd.img.gz Image). Per-user-bandwith restriction set to 200kbit/s. Captive portal is loading, I login using username and password, it authenticates me (listed on status page), redirect times out. No site is loading. restriction is turned off: Redirect works like a charm. I'm not using squid, so I don't think it's the problem here.

Thanks for your reply. I'm gonna try it and tell u if it's working.