@AYSMAN: Hi Everyone, Is it possible for the captive portal authentication (username and Password) using data's from an existing MySQL Database Schema? If so, Any guide on how to do this? Thanks in Advanced. https://doc.pfsense.org/index.php/Using_MySQL_with_FreeRADIUS

Hi, Let start the easy way : https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting

You could also create vouchers which have a time limit you can set up upfront.

I just purchase a Cisco SG-300-10PP. There is a feature to do the radius authentification for a multi-host port like an AP. I will keep you posted. Regards, Jonathan

Sorry, can't remember the technical terms right now lol, not able to access the device from where I am

You will need to use Radius authentication with an external Radius server such as Radiusdesk https://sourceforge.net/projects/radiusdesk/?source=navbar

Hi again Sorry about my spelling I'm not very good at it.

It is about Captive Portal in that I want the captive portal to be active and blocking all users from the internet but want to figure out which hostnames I need to allow to cause my client computers to behave less flakily.

No way  ;) [ Check out yourself : /usr/local/captiveportal/index.php - lines 262 -> 280 and the function local_backed() (/etc/inc/auth.inc - lines 370 -> 401) So, actually, its phpeanuts to send back the "why" information ;) ]

Old topic, similar problem. After some of my guests complained about lack of internet access through the Portal, I found that they were trying through the Google app, which requires logging in to their Google account before anything else happens. Either they didnt have a separate browser installed, or if they did, they didnt know how to use it. If they had Chrome, that worked OK. On this subject, I get a lot less problems reported using the username only for logging on. That is enough to keep out the casual leachers, which is all I care about.

Unifi already support dynamic vlan over radius. I just need to make it work thru the captive portal. Anyone has succed with this?

It works! Thanks. And it also works if the pfsense LAN interface and the combo-router are on different subnets (10.0.0.x for pfsense and 192.168.1.x the combo-router). The smartphone gets a 10.0.0.x IP and 10.0.0.1 as the default gateway even though it cannot see the combo-router at 192.168.1.254. How can this be? Can the smartphone see all MACs?

@doktornotor: You obviously are NOT supposed to delete certificates that are being in use. In fact, I filed a bug about thing being allowed, already fixed in 2.4.x - except for the WebGUI case. https://redmine.pfsense.org/issues/6947 I did NOT delete the certificate while it was in use. I selected our certificate and deleted the default.

@jlorenz89: 2. They are redirected to the captive portal and have to accept the terms but pressing accept Use This means "Authentication method" must be set to "Local User Manager / Vouchers" or "Radius" so a login page (with hidden authorized user and password)  shows with your terms of use. Using a login page means : no more MAC temporary usage. What you want isn't possible. Are these terms of usage that important ? What about printing them on a paper, so you can skip this part..

Ok, right. This is the English support section, the other languages are here (below).