In your Captive Portal configuration, you 'll find Concurrent user logins = If enabled only the most recent login per username will be active. Subsequent logins will cause machines previously logged in with the same username to be disconnected.

Every wifi device that joins your network takes a DHCP lease whether they go through your portal or not. The pool size needs to be sized to accommodate your device churn and your lease times and your portal timeouts, hard or idle.

hello , tough able to login into the pfsense webconsole using  the ldap user by giving it the webcfg privileges , it just works.

@stinkfly: It seems like when you tick the authentication method as Local User Name/Voucher, you don't have a choice, you have to use all 3?  Is this correct? When using vouchers, guest do not enter a user name and password, just the voucher. Even if these fields are present on the login page, the voucher ID is the one that will be used. Of course, this ID is the only identification the system has when it shows who's online. @stinkfly: What's the benefit of using Freeradius over a local database?  Number of users will be < 100, so scale shouldn't be an issue Example : "FreeRadius" can instruct the portal for each user a dedicated bandwidth. Or : How long a user can connect … Or : .... (see Google "pfSense + FreeRadius) => Answer on first link : https://doc.pfsense.org/index.php/Using_Captive_Portal_with_FreeRADIUS

Are you using a wifi access point, or a router? If its a router, you are performing a nat before the Captive Portal.

It might be easier for you to use a Ubiquity access-point and cloudkey controller as you have staff that are non IT types. You can set up guest access with a hotspot and use an app on an iDevice, Android device or web browser to print vouchers. Just remember to create a firewall rule out the guest network to the cloudkey port 8880. I had a play yesterday and it was quite easy to set up, NB I have multiple VLANS and have now disabled the hotspot SSID.       [image: IMG_0049.PNG] [image: IMG_0049.PNG_thumb]

Figured it out. In my nas table in the database, I thought "nasname" was a name/description of the NAS. Turned out to be the IP address, so after changing that everything is working as expected.

That happens when the device thinks the page it was originally going to is the portal page itself. I have found that about the only way to defeat it is to use an after-authentication URL redirect. You could probably get clever and test if the redirect URL is the portal page and, if so, issue a redirect somewhere, else redirect to the original browser request page. Or just forget about trying to send them to the page they originally requested and do the after-auth redirect.

@maxkoning: Thanks! But you didn't make this captive portal. You just edited it. Kindly read all the contents. Thanks!

@bear410hk: I dont know it is a bug or only my setting problem. anyone know what the problem in my case ? Thousands, no billions of people are using the captive portal every day. Another use number are those using IE11. So, that rules out the non-capabilities of pfSense : it works (for years now). The only thing we - and you as it seems - don't know is : how did you set it up ? For example : Using the build in logging page : it will work - you made your own and something is broken … so ;) Tell us more, and we might be able what you should or shouldn't do.

@androhit: Can anyone plz guide me to build this functionality in php or html 'html' (or even php if you which) is need to make your own login page, the one you upload here : Services => Captive Portal => [YOUR ZONE] => Configuration. Then, have a look at /usr/local/captiveportal/index.php : the file that uses your upload 'htmlt' file. And, as you can see in this "/usr/local/captiveportal/index.php", this file will tell you everything : /etc/inc/captiveportal.inc - that's will be be the place where  you 'interface' with the "Local user manager". So, two things : you should definitely know something about php, so you can read how things are done, and you will wind up having the knowledge to be able to  change the current system to something that needs YOUR typical needs.

@maxkoning: What can be the cause of this?? I tend to say : nuke your VLAN setup first - go for a simple basic "always works setup" : Use LAN for your own purposes and the next interface, OPT1 (or whatever you named it) as a dedicated Portal interface. This will give you a setup that works in a couple of minutes. If not : Check who is present (inserted into the firewall) : https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting Check out table 1 & 2 ( using "ipfw -x 2 table 1 list" and "ipfw -x 2 table 2 list" as mentioned in the doc). Your WIN clients are present ? If not : "We" from this forum can not see your setup. So, you have to detail your setup, so we might say something useful. Example  These WIN clients : they received an DHCP (!) IP ? Gateway ? DNS ? What were these ? What is the portal IP ? DHCP server ? etc etc.

Make sure this tag is not missing inside the form tag of your login page. I use Calvin's as well, it used to work on the 2.2 version, for it to work on 2.3 you must add the tag.

Hello, Everything is 'done' by PHP right now. PHP can be executed on the command line, and accepts parameters. Up to you to write these PHP CLI scripts ….