@giovannio I think we are on the same objective. Maybe we have to learn first the basics of this topic. Unfortunately, there is no step by step howto about this. Maybe this will help you. https://forum.pfsense.org/index.php?topic=57081.msg304619#msg304619

activate captive portal on the firewall port (assumed pfsense based) where the switch is connected. HTH

Problem solved! Exporting the vouchers to excel file cuts the zero in front of the codes by default…

Right… I've got no clue what so ever why I missed that... guess I could blame the language barrier ;) Tested the pass through and works like a charm, thanks !

I'd suggest you post on the International Support forum.

authenticated users are in ipfw so we'd need something like 'ipfw sync' but it's still missing https://forum.pfsense.org/index.php?topic=60725.0 Stefano Busanelli seams to have a workaround but I didn't see it: http://lists.pfsense.org/pipermail/list/2012-November/003202.html edit: it's feature #97 for future releases https://redmine.pfsense.org/issues/97

@uaxero: can someone tell me what file the client macs are stored when the mac-passthrough is configured in the captive portal All MAC are on the master config file: /cf/conf/config.xml

Thanks for the contribution. I've merged it on squid3-dev pkg v 2.2.1

you can auth captive portal "directly" at AD.  you'd have to add NPS as a server role on your windows server (network policy and access service). there's a sticky post on this subsection of the forum https://forum.pfsense.org/index.php?topic=63791.0                                                                                                                                   ^^^ at the bottom of that post is a link to a PDF that contains pictures/screenshots of the whole process

Turns out the problem is the DNS servers entry in DHCP server for WIFI interface. Seems to be working if I use the system default DNS servers. Sorry for the confusion.

SOLVED problem THANKS

wouldn't that just make it overly complicated? why don't you just handout vouchers that are valid for X hours ?

lookup radius / freeradius for more intel on that

Thanks for the reply, this seems like a pretty strong game killer for captive portal.  One of the main reasons I need to white list devices includes xbox live, and psn (student dorms).  The PS3/PS4/360/XBone devices do not play nice with the captive portal at all.  In fact the XBone requires you to sign in to xbox live before you can browse the web it seems, thus obviously you can bring up the captive portal page.  I am considering trying to whitelist the xbox live and psn networks by host name to see if that helps… EDIT: but of course while that will allows the devices to sign into the gaming networks, it wont allow other sites and services to work on those devices...