Hi everybody, It works! Finally i've modified /etc/inc.captiveportal.inc with the following values : function getNasIP() {     $nasIp = "194.78.xxx.xxx";     if(!$nasIp)         $nasIp = "0.0.0.0";     return $nasIp; } and rebooted my device… (this is what I did not do first time) After this, my radius messages were looking better NAS-IP-Address = 194.78.xxx.xxx         NAS-Identifier = "456.yyyyy.be"         User-Name = "testuser"         Acct-Status-Type = Start         Acct-Authentic = RADIUS         Service-Type = Login-User         NAS-Port-Type = Ethernet         NAS-Port = 7         Acct-Session-Id = "221de044d5aee762"         Framed-IP-Address = 10.1.0.10         Called-Station-Id = "5c:d9:98:aa:bb:cc"         Calling-Station-Id = "00:21:5d:aa:bb:cc" Mister developers, is it not a way to add a field on captive portal configuration page to permit to manually change the WAN IP address? I think it should be grandly appreciated... Thierry

Suggestion: add a firewall rule (as near the top of the list as appropriate) for interface vlan1 to block (or reject) all access from vlan1 net to 10.180.1.0/24. Then go to Diagnostics -> States, click on Reset states tab read the explanation and click on the Reset button.

Any direction, use that IP, with no bandwidth limit.

See http://forum.pfsense.org/index.php/topic,38169.0.html and the linked document.

To restore a 1.2.3 config you must import the entire configuration. You can't import just one section of a 1.2.3 configuration into a running 2.0 system.

Sry, my bad I was using IE8 and on it doesnt show small blue cyrcl on the right of the voucher roll table.

good idea. I like it. I want to know too ?

What about instead of redirecting to 'original URL' when passed the portal, redirect to a framed page with banner in one frame, 'original URL' in the other?

Hi… I am back on this thread - I had to troubleshoot a hardware issue unrelated to this. Ok, I will look closer at the rule... I will critique the setup again... Thanks Lost, Wally & everyone for the response... H.

Hello. Now does the report of the Squid. It works fine if I use Google Chrome, a little 'less well if I use Mozilla. Senbra just to be a refresh problem, sometimes does not update the data. Thanks for your help. Until next time.

I'm not sure. The only thing I did was place a tick on enable vouchers. I was then able to create vouchers and the rest of the data was pre populated. all I have to do was click on save at the bottom. At some point between now and then I lost the ability to edit remove or create vouchers i guess. Thanks for your time.

I was upgraded my system to last week (05 June) and some service/packet got issues, packet reinstallation fix that.  Everything was OK till today enabled Secure Shell. After that my webgui crashed and i restart to the webconfigurator. That log come from lighttpd.error.log. But after restart full system, everything work fine now.

When the user tries to access a page, if their MAC isn't listed as being logged in, they are directed to the portal page instead of whatever they tried to load. DNS is needed because unless a client can resolve a hostname, it will never try to load a page, and thus would never hit the portal.

so no one knows how I can stop the user to re-authenticate after the session time runs out.

I have tried with just using the settings on the captive portal page with no luck at all. I can login without problems, but none of the rate limits i set work at all.. i have done it allowing each user 600k down and 600kup, testes and users get anywhere from 1mb to 4 mb down ans up.. i have a FreeRADIUS server, ready to go but i also cant get that to work with the captive portal. I set the radius servers IP in the external radius server settings, but when i try a login, i get an error saying that there was no valid radius reply or something like that.

Please, how do I install radius manager in pfsense, can you give me a guide plz,thank you

No one?? I really need this working and can't find an answer.. if someone could help it will be highly appreciated

@SEMIJim: Basically the entire captive portal thing is as an alternative to a fully-open-access WiFi network.  I'd prefer to make clients have to use WPA-PSK, or at least WEP, but the Powers That Be at each site nix that idea as too much trouble for (prospective) users. I know if you setup the open public Wireless on a specific port using pfSense you can basically tunnel that port right out the firewall to the DSL/Cable by using the "Any" rule and blocking your LAN. You could eliminate a passphrase and run wide open with the SSID broadcasting or as you already know you can use a public login with a known user/passphrase. However the other point to your scenario will take some further study and I don't know if it can be done or if I fully understand what your end result will be. I do know that you can use multiple logins as I have already tested this in my lab. I just created a user group "Wireless Users" and then created the User Account "Guest" who is a member of the "Wireless Users" group - with a setup passphrase and have logged in with multiple connections from 2 different laptops. So, yes to that question…. and if I remember you can control this on the CP interface but I will need to check this again... Perhaps someone else can chime in.... I wanted to have two wireless segments on my second customer I am now working with but want to control both public and private wireless using separate ports which goes back to bridging the private wireless to private lan. The other part to this would be to eliminate the port on the pfSense appliance and hang a WPA-PSK wireless AP off the switch for the private wireless network. (no CP)