pfSense does not need to be the DNS server. But it is usually easier. If pfSense is not the DNS server, the DNS server(s) assigned to the clients need(s) to be passed through the captive portal by IP address so DNS queries can succeed prior to captive portal login.

Maybe I need to look at something else to do this then in the mean time. I wouldn't want to sacrifice IPv6 for this to work. @Gertjan: @PayableOnDeath: Is there anything special I need to do to have both IPv4 and IPv6 working via the portal? You were saying "special" ? In that case, well Yes ! Rewrite the entire 'captive portal code' so it can handle IPv4 and IPv6 …. Ok, apart from that  ;) Although if I did I am sure wouldn't be up to the standard required to be included and would need to be rewritten again  ;D @Gertjan: From a day-to-day usage, when IPv4 works, your client could use your portal. Adding IPv6 and be ready to open a hotline ;) Why would I need to open a hotline?

@AYSMAN: Hi Everyone, Is it possible for the captive portal authentication (username and Password) using data's from an existing MySQL Database Schema? If so, Any guide on how to do this? Thanks in Advanced. https://doc.pfsense.org/index.php/Using_MySQL_with_FreeRADIUS

Hi, Let start the easy way : https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting

You could also create vouchers which have a time limit you can set up upfront.

I just purchase a Cisco SG-300-10PP. There is a feature to do the radius authentification for a multi-host port like an AP. I will keep you posted. Regards, Jonathan

Sorry, can't remember the technical terms right now lol, not able to access the device from where I am

You will need to use Radius authentication with an external Radius server such as Radiusdesk https://sourceforge.net/projects/radiusdesk/?source=navbar

Hi again Sorry about my spelling I'm not very good at it.

It is about Captive Portal in that I want the captive portal to be active and blocking all users from the internet but want to figure out which hostnames I need to allow to cause my client computers to behave less flakily.

No way  ;) [ Check out yourself : /usr/local/captiveportal/index.php - lines 262 -> 280 and the function local_backed() (/etc/inc/auth.inc - lines 370 -> 401) So, actually, its phpeanuts to send back the "why" information ;) ]

Old topic, similar problem. After some of my guests complained about lack of internet access through the Portal, I found that they were trying through the Google app, which requires logging in to their Google account before anything else happens. Either they didnt have a separate browser installed, or if they did, they didnt know how to use it. If they had Chrome, that worked OK. On this subject, I get a lot less problems reported using the username only for logging on. That is enough to keep out the casual leachers, which is all I care about.

Unifi already support dynamic vlan over radius. I just need to make it work thru the captive portal. Anyone has succed with this?

It works! Thanks. And it also works if the pfsense LAN interface and the combo-router are on different subnets (10.0.0.x for pfsense and 192.168.1.x the combo-router). The smartphone gets a 10.0.0.x IP and 10.0.0.1 as the default gateway even though it cannot see the combo-router at 192.168.1.254. How can this be? Can the smartphone see all MACs?