Hi. Use a NIC (OPT2) with a portal acces for your 'guests'. Put a AP in your LAN with WPA2 activatred. YOur emplyee uses this AP to connect to your LAN, no pfsense needed for that. And: he will be in the same subnet, so shareing rescources (Windows PCs, others) work straight away. Or, share the same captive portal, bind the MAC of the PC of your employee to a reserved IP, and use firewall rules so that he can access local resources. Btw: your portal interface is running on your LAN ? OPT1 ? Be careful: if your portal interface is on your LAN (bas idea) and your Office network is also on the LAN, then 'guests' can easily access office network resources, because traffic doesn't flow through the pfsense firewall. They do not need to be connected to the portal Interface to access the local network segment.

@GruensFroeschli: For such a setup you need to add these domains to the whitelist of the CP. –> "Allowed Hostnames" Thank you. Issue has been resolved.

Not missing the point, its just that setting traffic quotas is rarely called for. As an alternative, you could flash a suitable wifi router with Gargoyle firmware, it has this feature built in. Much simpler than trying to set up Radius for domestic use.

Adapted from http://davidwalsh.name/disable-autocorrect

Same problem only when wan connection failed

I have it working. Thanks!

Ok I think I solved it by simply disabeling all captive portals, restarting and enable them one by one so that the ports wouldnt overlap as they restarted. I also got a feeling that the problem itself could have been an issue where the non-encrypted site took the port and that it kept it while I enabled https so that when using https the port was already taken by the same captive portal site but the non-encrypted version so to speak. Anyway, I noticed another problem that I seem to have in this version and that is that every time I rebbot the firewall I have to readd the .html sites for the captive portals. The files get deleted on a reboot. Anyway thats another problem for another day.

hello, thanks for the reply. with some tests I have already managed to create a PHP page where entering credentials, it is checked whether the user must change his password (with the table "resetpsw"). Searching the internet I found a code to establish a connection to mysql and change the password. I do not know how to integrate this code in the login page and adapt it to run before the action $PORTAL_ACTION$ that authenticates the user. thanks

@jhochwald: More the Bandwidth parameter that we pass him via Radius and/or CP Settings. Ah ….. This info is also present in the PHP array, loaded when PHP executes. The PHP code that 'makes' this page "Status => Captive Portal" ( /usr/local/www/status_captiveportal.php ) shows you all the arrays and variables (and how to access them) you need to make your page.

You saw this message https://forum.pfsense.org/index.php?topic=69606.0and ?  ;)

@Trel: I haven't used the captive portal in ages, but is there a logout button/page that maybe that machine's browser is prefetching? Itb is already push-out by a jaca script when login succeded (if set to do so). But a button needs to be pressed to actually logout. This would show up in the captive portal log. Right now, I guess "LOGOUT's aren't seen in the portal log. So 'something' is resetting the portal firewall (the tables ipfw that contain the allowed client IP's).

@Gertjan: Source ? It was a reply to something on reddit.  It's not a source.  That's why I'm asking if there's anything accurate about that.

The portal log shows connect and disconnect messages ? Any other messages ? Drop in over here https://forum.pfsense.org/index.php?topic=69606.0and check if that is your issue.

Router, Firewall/PFsense reside in the same segment. They meet at the switch.  Captive portal is implemented in one of the VLAN . Whenever I enable the portal printing does not work and this is is windows. Also another finding is that when I used Sonicwall,  mac address filtering is working without using SOnicwall as the default gw for client. But when I use PFSense and enable portal mac filtering is not working it always prompt for username and password. Client is not connecting in public network they are connected on the lan network. Can you advise me on this.

hi thanks for the sulucion also had that detail …

U have issue with some browsers? I had use on desktop: firefox chrome iexplore Android working to.

Thanks someone give us ideas, we will work on this one, the code is there :-).