@fmattbp said in [Solved] Slow captive portal on smartphones: just a little update. I issue the certificate as example.mydomain.com and What I do : I asked for a wild card cert. @fmattbp said in [Solved] Slow captive portal on smartphones: portal loads instantly in every device I'm seeing the same thing. Actually, we all know why : browser prefer by far https sites I guess, before they fall back to old school 'http'.

@akuma1x said in simple toggle for children VLAN: Ok, if it's all hard wired, how about sacrificing a small smart switch (because you said VLAN's) and power said switch with one of those "smart home" wifi power outlets? The power outlet thingie can be turned on and off on a schedule, or even better, on demand with a smart phone app. https://www.amazon.com/Gosund-Compatible-Required-appliances-Certified/dp/B079MFTYMV If the switch doesn't have power, then the network traffic isn't going to pass. I'm NOT saying it's bullet-proof, or kid-proof either, but it could be a cheap & easy way to do this. We will consider that, thanks. Maybe we could even toggle the existing switch-port via FHEM somehow.

@lexxai Yes, I've found this site https://knobelbecher.net/vouchergenerator/ It gives you (on the botton of the page) a new index.php that is patched for the QR code. got it working just fine Thx

I'm new to pfsense but, can't you limit the bandwidth by voucher or put some download limit ? and use 5ghz antenas.

simple : enable captive portal without enabling DHCP, then set up static IP on your clients.....

@louger said in How do I call Radius server to my Access Point outside the local network?: I followed this tutorial Why ? The original 'from the authors' video isn't good enough ? If your Radius server isn't hosted on pfSense using the FreeRadius package and The Radius server isn't hosted on the captive portal network segment then Add the IP of your Radius server to this page : [image: 1571649861656-1a0cc4d7-24c3-4944-a665-15d308299f61-image.png]

@Gertjan said in Anyone that can configure a captive portal?: Hi, Be aware that the guy who offers a captive portal should also support it. Like : you want to drive a car : you'll get best results when you actually are trained to do so Oh thanks for the suggestion, but i don't need that, once we test it and it works, i am fine with that, no need for support, i will pay again if necessary.

Hi, @ felipe-volpato. First of all thank you very much for sharing the video. I'm looking to do something like that, would you be so kind as to share some information on how you did it? Thank you very much in advance for your time

Ok, that's what i thought, GJ

Only way you could do that would be to setup a VPN to pfSense and run the captive portal on that. It would probably still be painful though. Steve

Still willing to hire someone, if there is anyone which can do the job online, kindly let me know your fee, thanks.

@free4 thx, i've setup a transparent proxy + HTTPS/SSL Interception on the netgate itself and use my existant proxy as a peer proxy. it works

@ilarioQ Find solution, in same place to image.

@free4 I disconnected everyone, stopped and restarted the captive portal. I had some users connected with the vouchers, some were reconnected and some were not. Thanks.

@Crunch1788 said in Redirect does not work: type anything in the browser it just dont redirect... This "anything" should not be a https site that you already visited before. These days, certs are persistent, ans some of them even completely forbid that you use the http:// destination. So, type in a http (not https) site that you never visited before. This would start the usual DNS questioning and when the answer comes in (the A one) then the browser will (try to) connect to it using port 80. Nifty ipfw firewall rules on the Captive portal interface will redirect any "connections to port 80" to the firewall itself. And guess what, the web server that servers the captive login page is listening over there. So you see that, instead of the site you wanted to visit. So, this "anything" should be something valid, if not the DNS exchanges "anything" for "does not exist" and you still have a no go. But : these days there is no need any more to explain these things. All OS's are captive portal aware these days so it works out of the box. I tend to say : activate the portal with as Authentication Method : None. and your done. The trick is : a good working DNS isn't optional thing. The captive portal really needs it - that is, the clients do. So, people that m*ss up the DNS (Resolver) settings will wind up with a non working captive portal. Most issues are being handled here : https://docs.netgate.com/pfsense/en/latest/captiveportal/captive-portal-troubleshooting.html Btw : I could show you the video that my brother made about captive portals. Very nice except that it wouldn't help nobody. If you want a video, use the real videos from Netgate, the official ones. "Done by the guys who build it". Like having Windows explained to you by the guy from Microsoft. Not your car dealer. really, it makes a difference. edit : I was typing to slowly .... (during work hours) ... What I advice you to do : (All) device use DHCP - and pfSEnse should hand out the IP mask gateway and DNS. The latter two are the IP of the network where the captive portal is running. The DNS resolver settings should be "default" : example adding 8.8.8.8 and you're out of business. First test : just use one (1) ether-net cable, no switches - no AP's, nothing except the one 1 $ cable. This should work. Now you can include a switch. A switch has no settings so this can't go wrong. Test again. Now add an AP ... and be careful : an AP - not some "router-with-AP-with-router-functionalities" like DHCP/Firewall/NAT etc still activated. Just an AP. Shut down the rest (DCP ... DNS ....). Give this AP a static IP - gateway being the IP of pfSense - DNS is the IP of pfSense and you'll be fine. About the OS detection : example : an iPhone : Select the captive portal wifi network. Wait 5 seconds. The portal login page shows up "as by magic" : no need to open up a browser first. Same thing for Microsoft Windows since version 7. I think even "android" devices have it working out of the box these days. No interaction from your side is needed.

Hi , Thank you for your reply , I have two instances but still can't see where can I separate users for each zone, Because when I create users I see nothing that mention to whom the users will be applied to. [image: 1569656151293-selection_225.png]

Ah sorry I'll be more careful in the future. Is it okay if I delete this post?