Check your FW Rules on that interface…..

thanks for the advice i think its only Max-Forever-Time is the one using "never" for the %s parameter other limit has good reply like Max-Daily-Time is "daily" for the %s counter parameter. Though have not tested bandwidth limit yet. I will test it sometime.

That happens when the captiveportal.inc function captiveportal_get_next_dn_ruleno() returns empty or is_null (the test is different in two different places.  Strange.) Sounds like your ipfw was out of pipes.  Not sure what the limit is.  64K?  32K? If it does it again you can: ipfw -x cpname list to see what the portal was doing.  You can use: ipfw_context -l To get a list of cpnames and the interfaces to which they are attached.

I have had a problem with squidguard. A wrong filter. It's solved.

This server provide internet for wireless users in the campus of the university , so i don't need users to put login information every time they try to go online .

Any suggestions?

@bassmoore: Hi, We have setup a captive portal page but it will only display when you enter a HTTP address. For example the idea is when they connect to a Free Wifi service they open Google Chrome they are met with the Captive Portal Page and then they press continue and they can browse the web. This works but only with HTTP addresses. E.g. when you open Http://www.google.com it shows the captive portal page but when you open https://www.google.com nothing happens! running 2.0.3 no more updates available. Thanks in advance!!! Check enable HTTPS login then https browsing will be redirected also. You need to setup your cert.

Not all were disconnected, there are those that still can and have an internet connection, and there are cannot connect anymore stuck on the captive portal page.

I've found the problem, though not the solution. The tablets are configured to connect to a https site, and CP redirects only access to port 80, not port 443, as mentioned here: http://forum.pfsense.org/index.php?topic=53630.0 For the tabelts that do work, I guess there's some background process that's communicating with a site via port 80, this allows CP to authenticate the MAC, so https access then works as expected.

Don't worry. This is something related to your setup only. Normally, the MAC shows up - I can see them for my clients that are connected to the portal interface. pfSense can show the MAC of the clients IF the client connects to the portal interface NIC. Often, this isn't the case if you put a router between the client and the portal interface. So: don't. Mostly, this is related to an AP that is setup as "AP and router" ….

The allowed IP address requirement only comes into play for basic CP functionality if the DNS server the client is instructed to use is not on the client's local subnet, including the pfSense LAN port/DNS forwarder. You will therefore see many cases where it's not necessary. It, along with allowed hostnames, is also useful in configuring a "walled garden" which allows access to certain web assets without going through the portal first.  It also allows you to use outside assets to make up the portal page itself. Glad it's working.

With VLANs. One VLAN for the first SSID, another VLAN for the second SSID. I doubt Tenda supports VLANs.

Hi, I fillep up those form (only on my slave box) with the ip address of my master pfsense box for example: Shynchronize Voucher Database IP…................................172.16.10.1 Voucher sync port..............................................................8880 Voucher shnc usename.....................................................admin Voucher sync password....................................................xxxxx I also use these details for my CARP setting, but when I did failover test, the voucher list seems to be NOT synchronized. even though the "Voucher Rolls" statistics are the same with master box, but the list it self is not the same. For example, i tested  "dun5smgq59r47" come out as valid in master box, but come out as invalid in slave box Appreciate if anyone can help... Thanks so much! ;D