Did anyone ever find a good solution for this?  I have the same problem, and I've tried editing the index page but it doesn't affect it.  If after we authenticate we close and reopen the browser then it works.  But otherwise it keeps redirecting back to the portal page.

Hi, Thanks for the Interesting;) If a client try to enter on Internet, the IE or Firefox will try open the HomePage of that browser, and if the homepage is for e.g - http://www.google.pt appear in instant the page login of CP, but if httpS://www.google.pt does not open (for exemple, I now that page does not exist ;D). Its maybe because the port? http is Port 80 or 8080 and https is 443 ???

The patch for this is pretty simple to implement.

If you put that router on a different interface you can enable captive portal on that interface.  Probably not the ideal solution, but it will definitely work. Also, be sure to set the router to AP mode, otherwise you'll see one person accepting the ToS and the rest getting through w/o clicking on anything.

You can tie a MAC address to a specific IP address and then put the IP address in a penalty box with separate bandwidth parameters, I do it all the time.  [image: ole.gif]

@Heitor: Hi my dear, It´s possible, I currently use pfsense with: Squid Transparent Proxy Squid Guard Captive Portal w/ RADIUS authentication on Domain Controller (Windows 2003) Everything works fine. Is not necessary any extra configuration. wich version of pfsense do you have? I really need to do the same setup and I have the same issue tha this topic: http://forum.pfsense.org/index.php/topic,20134.0.html

@GruensFroeschli: I wouldn't bother with extracting the relevant part out of the config.xml manually. Just go to Diagnostics –> Backup/Restore --> Backup configuration and select "Captive Portal" from the dropdownlist. This automatically downloads everything you need. To restore this go to Diagnostics --> Backup/Restore --> Restore configuration select Captive Portal from the dropdown and upload the file you download before. thats what i want. its resolved now. and thanks for your great help. i love pfsense :)

Please contact privately persons for this sugestions.

Hi Sir, Finally the captive works on vlan2. I create vlan1 then i move lan to vlan1. Thanks for the help

There isn't an OSPF daemon for pfSense at the moment, and the BGP package is currently geared toward WAN routing and not internal (but it might work, I'm not very familiar with BGP). The easiest thing to do would be as I said, add a manual route for your lan-side subnet pointed at the pfSense WAN IP.

Why don't set the routers to an AP mode and use pfSense as the gateway and have it do the DHCP for all the wireless?  And though I'm not sure what you're doing for DHCP, if you've already got that part working then just set the the wired connections to the pass-through IPs and leave the wireless stuck facing the captive portal? I mean, of course multiple users are going to get through out after one person has auth'd as pfSense is just seeing one device that has auth'd.  That's why you'd use APs not routers. Our solution to something like this involved routing the wireless through a separate, communications isolated, vLAN routed by the Core Switch and using WAPs pointed at the gateway (pfSense).

If anyone can tell me the software used to create the walkthroughs on the website I'll actually go ahead and create a full walkthrough. Currently I have pfSense running with RADIUS.  The RADIUS is checked against AD using an auth server that is not a domain controller but a domain member.  This is so it'll work so long as any DC remains functional (5 total).  The auth is done in Server 2008 (maybe moving to 2008 R2 soon).  Captive Portal is using https.  Wireshark verifies that we can't pick up any sensitive information from logging in. Filesharing is blocked using a combo of the traffic shaping along with OpenDNS. In the event of legal issues, logs include username, IP assigned, MAC, times, and all the essentials, stored in a RAID 5. The setup we're using now is pretty much tailor-made for large-scale wireless deployments, especially at educational institutions. As I said, I'll create a walk-through if I can get clarification on how to go about doing it best.

ok everything i need is in captiveportal.inc

Thanks for the clarification, ermal. I suspected as much but it's nice to know for sure.

Well this seem not to be very stable, I'll start a new thread..

I think you can use radius. It'll help you anyway.