NetBIOS name is not really an easy add, if your DNS and NetBIOS names match up (which they should) you can glean that information from the IP.  If you use pfSense for your DHCP (which I assume you aren't since you use windows server) you can use dhcp hostname to register in the dns resolver in pfsense. nb

I just solved this very situation.  For my setup I had pfsense with a GigE NIC vlan trunked to an HP Procurve switch fabric.. no matter which VLAN interface I selected the Captive Portal remained wide open (non functional). Turns out, in my setup anyway, that Captive Portal in pfsense will not work properly with a VLAN interface.  I installed another NIC in the box, a cheap 3com 100MB with no VLAN.. just ran a cable directly to that VLAN on the HP Procurves.. and removed that VLAN from my trunk group. Works perfectly. Every setup I did the non VLAN NIC works and the VLANs on the other NIC do not. Hope this is helpful to you.  -dw

This must be a rule issue. When I allow Any from Opt4 to any its works fine and redirects. Current rules I have or would like are: TCP OPT4 HTTP to ! Lan any What rule do i need to have for CP to redirect? Anyone happen to know? Thanks CConk01

Did you manage to achieve an upload/download quota? I have been trying to do it for a while now with no success. If you did achieve it please could you let me know how. Many thanks

no solution?? :( So, I can't use CP… Anyone have the same problem???

thanks Perry, That's ok, i have reinstalled Pfsense and it works .. surely an error .. But now i'm authenticated, i ping all my subnets works, but i cannot go on internet. I think it's not a problem on pfsense, surely a missing rule on the last firewall .. right ??

Thanks a lot  ;)

I have a good amount of passthrough MACs as well and see no problems.  What are the symptoms you're seeing?  Stuff just not in the config?  Is there anything there if you ssh in and less the /cf/conf/config.xml (I'm making the assumption that you're adding this to the XML directly).

hi i'll start by installing radius and learn how to set it up, i tried before but didnt succeed, do you sugest any link on how to configure radius? thank you again

Hi All : I am very happy to see someone can solve this problem, but    I am wonder why i have edit the /etc/inc/captiveportal.inc file and it don't work ???   below is my captiveportal.inc …..   -----   $cprules .= << <eod<br># ... 10000-19899: rules per authenticated client go here... redirect non-authenticated clients to captive portal add 19902 set 1 fwd 127.0.0.1,8000 tcp from any to any 80 in add 19902 set 1 fwd 127.0.0.1,8000 tcp from any to any 8080 in ------ hope you can give me some advice ... ps: 1. my english is poor     2. the captive portal port is 8001, it is right ?</eod<br>

The changes that I mentioned in the link will be done for sure in 1.3 Scott Ulrich has already made some of the changes. There are a few more to go. I also would find it useful to have the users remain logged in after reboot or settings change so I'm considering taking that on. First I need to coordinate with another commiter that stated desire to work on Captive Portal.

I would think it's doable somehow but it's absolutely beyond my scope so I could be wrong. Post a bounty and see what happens and someone more knowledgable than me is thinking about that.

http://forum.pfsense.org/index.php/topic,8748.0.html

Yes, this applies to any version of pfSense and I doubt that this will work in 1.3 either as nobody intends to make this work currently.

You don't send the required form back to the cp for authentification. From the cp-webguipage: Upload an HTML file for the portal page here (leave blank to keep the current one). Make sure to include a form (POST to "$PORTAL_ACTION$") with a submit button (name="accept") and a hidden field with name="redirurl" and value="$PORTAL_REDIRURL$". Include the "auth_user" and "auth_pass" input fields if authentication is enabled, otherwise it will always fail. Example code for the form:

MAC passthrough on CP use keep-state option of ipfw. It's means that dinamic rule will be generate on first packet and than will be destroy by inactive timeout. In your case, i think, inactive timeout come for some reason. But why? i don't know. Let's look on your 'ipfw show'…

Possible? Sure, you can modify the logout window even more than just changing the color. Add additional functionality to it, it's all php.

thank hoba for information