• Radius or voucher authentication on same captive portal.

    7
    0 Votes
    7 Posts
    3k Views
    T
    @Trel said in Radius or voucher authentication on same captive portal.: Here's an example multi-method login page. It's probably overkill for anything you're trying to do though. multicappor.txt Can I please have a copy of the code?
  • freeradius just stop working

    8
    0 Votes
    8 Posts
    2k Views
    K
    i had two different urls in, one disable the freeradius and the other did not. i used both of them and that was the result i observed. with the url that is not disabling the radius i am also redirected to the redit URL.
  • CP with Freeradius and MySQL - fixed number of concurrent logins per user

    Locked
    6
    0 Votes
    6 Posts
    6k Views
    C
    @jhochwald @jhochwald said in CP with Freeradius and MySQL - fixed number of concurrent logins per user: @EMWEE: Anyone got a solution for this problem? I cant figure it out. I need a solution were a username can use 2 MAC's maximum. So one user can register his phone and laptop on the same account. The Solution is easy: Open /usr/pbi/freeradius-amd64/etc/raddb/sql/mysql/dialup.conf (or i386 if you run this) and search for the following: #simul_count_query = "SELECT COUNT(*) \                             #FROM ${acct_table1} \                             #WHERE username = '%{SQL-User-Name}' \                             #AND acctstoptime IS NULL" Change it to: simul_count_query = "SELECT COUNT(*) \                             FROM ${acct_table1} \                             WHERE username = '%{SQL-User-Name}' \                             AND acctstoptime IS NULL" As you can see it works fine: [2.1.5-RELEASE][root@hotspot.test.lan]/root(24): radtest USER PASS 172.16.1.1:1812 0 Start1234 Sending Access-Request of id 199 to 172.16.1.1 port 1812 User-Name = "USER" User-Password = "PASS" NAS-IP-Address = 192.168.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Reject packet from host 172.16.1.1 port 1812, id=199, length=68 Reply-Message = "\r\nYou are already logged in - access denied\r\n\n" [2.1.5-RELEASE][root@hotspot.test.lan]/root(25): Please note: You must configure the Accounting Table in Service/FreeRADIUS: SQL If you do not use your SQL Server for, the feature will not work. P.S.: I configured it on a group base, but it works also per user. Hi, i cant find this path /usr/pbi/freeradius-amd64/etc/raddb/sql/mysql/dialup.conf (or i386 if you run this) i am running pfsense 2.4.4-RELEASE-p3 (amd64) i am looking to limit the logins per user to 2, without a third login kicking out the first one. kindly guide me through please.
  • Captive Portal Hard Limits

    20
    0 Votes
    20 Posts
    2k Views
    T
    @Gertjan Great! I think I saw that code somewhere. Will start with this one. Thanks a lot @Gertjan. If anyone has other ideas that can make this happen, please do add some lines here :)
  • Captive Portal Upload and Download Limit

    2
    0 Votes
    2 Posts
    158 Views
    GertjanG
    Put them on another LAN/OPTx interface ?! Or, use FreeRadius, which gives a per user upload and download limit - although I guess the MAC added users all still handled by the captive portal main setting. I never tried this.
  • captive portal over wireless client access point

    7
    0 Votes
    7 Posts
    967 Views
    L
    thanks
  • [Solved] Captive Portal | 1 user per| Log in

    3
    0 Votes
    3 Posts
    333 Views
    V
    @Gertjan Thank you for the info.
  • RESOLVED: Captive Portal - One Time Password Help

    14
    0 Votes
    14 Posts
    2k Views
    B
    Alright used it for a hour. Turning that check box, Reauthenticate Users, under Captive Portal Configuration OFF appears to have no other adverse effects. Idle timeout and hard timeout, again on Captive Portal Configuration page, are respected still as well. So I guess the moral is, anyone looking to utilize OTP with Captive Portal...make sure above mentioned box IS UNCHECKED(toggled off). :-) Thank you for all the help and tips @Gertjan; I appreciate your time.
  • [Solved] Squid trans proxy and Captive Portal

    1
    0 Votes
    1 Posts
    161 Views
    No one has replied
  • Captive Portal - Enable / Disable by Schedule or Cron

    9
    0 Votes
    9 Posts
    1k Views
    kiokomanK
    @Joao-Paulo you need to understand what that script is doing IPFW is a stateful firewall used by captive portal it does not literally disable captive portal we are putting a firewall rules on top of every other rules inserted by captive portal, in this case the first rule should match and let any connection to go anywhere, so if we analazy the command ipfw add 10 allow ip from any to any keep-state we are telling ipfw to add a rules that allow any ip to go to any destination with priority 10, that should circumvent the captive portal this is for example: [2.4.4-RELEASE][root@pfSense.localdomain]/var/log: ipfw add 10 allow ip from any to any keep-state 00010 allow ip from any to any keep-state :default [2.4.4-RELEASE][root@pfSense.localdomain]/var/log: ipfw list 00010 allow ip from any to any keep-state :default 01000 skipto tablearg ip from any to any via table(cp_ifaces) 01100 allow ip from any to any 02100 pipe tablearg ip from any to any MAC table(test_pipe_mac) 02101 allow pfsync from any to any 02102 allow carp from any to any 02103 allow ip from any to any layer2 mac-type 0x0806,0x8035 02104 allow ip from any to any layer2 mac-type 0x888e,0x88c7 maybe the only trouble that can arise is if there is people that have used captive portal before we add that line and still have a state running, so please explain what is exactly not working
  • Captive Portal wget redirect loop

    2
    0 Votes
    2 Posts
    277 Views
    KOMK
    I tried it and I see there are two redirects, from nbc.com to www.nbc.com, then another to https://www.nbc.com. Note that I do not have captive portal installed so its not an equivalent comparison. While not directly addressing your issue, does it work if you go direct via wget https://www.nbc.com?
  • July 22, 2019 Any UPDATE Pre-Auth Captive Portal

    4
    0 Votes
    4 Posts
    604 Views
    M
    @free4 well how did you do it correctly?? what's the secret behind???? please tell me please.....i will screenshot the page so you can see whats happening somehow okay
  • Guys Do we have development alreadyin Captive Portal Pre-Auth?

    Moved
    2
    0 Votes
    2 Posts
    232 Views
    GertjanG
    This https://forum.netgate.com/topic/137979/what-happened-to-pre-authentication/3 is as mucth as I know right now - didn't re tested it since.
  • Dell R430 bge (Built-in Port Hangs ) & Captive Portal Stop working

    23
    1 Votes
    23 Posts
    2k Views
    W
    I would like to update changes i have made in case someone else is facing same issue now or in future to fix similar problems. given below is status after 2 Days System Running. Captive Portal Status ( 2000+ Users ) [image: 1563649435876-captive_portal_users.jpg] Network Status ( so far only 1 Error ) [image: 1563649531441-network_status.jpg] Changes I've Made 1- In /boot/loader.conf.local - Add the following (created new file): for Broadcom NIC kern.ipc.nmbclusters="1000000" hw.bge.tso_enable=0 hw.pci.enable_msix=0 2- In Interface/Portal ( Portal Interface bge2 ) Speed & Duplex select 1000baseT full-duplex ( Auto setting was giving some errors on Zyxel switch logs ) 3- In /usr/local/etc/php-fpm.d/www.conf listen.backlog = 511 ( default ) to listen.backlog = -1 php-fpm related errors gone after changing listen.backlog ( didn't get any till now in two days ) php-fpm error kernel: sonewconn: pcb 0xfffff80130a2f0f0: Listen queue overflow: 193 already in queue awaiting acceptance (155 occurrences) now only one issue i am sorting out related to nginx given below. nginx: 2019/07/20 10:25:19 [alert] 95352#100567: send() failed (40: Message too long)
  • solved Using captive portal with no internet access need DNS help

    3
    0 Votes
    3 Posts
    353 Views
    F
    @free4 I have had some problems with browsers not liking my DNS server tomfoolery. Could you point me in the direction of the proxy server and settings I may need to uses? The network is only used for a neighborhood gaming network. I just want to serve three or four personal web pages, share files, and play some old school lan games. In fact I do not want them using the Internets at all. Thanks.
  • user based ACL

    Moved squid pfsense captive portal
    1
    0 Votes
    1 Posts
    457 Views
    No one has replied
  • Captive Portal only shows authenticated users

    8
    0 Votes
    8 Posts
    893 Views
    tleadleyT
    This post is pointless if this argument points to rebuilding my network, how else are you going to get 2000 plus users on the same meshed Wifi guest network. I am not sure where your advice is coming from. This is a guest network setup so no mystery here, so if I have a conference center with an event your advice would lead me to believing I would require an astonishing 10 seperate network interfaces and SSID's... Interesting I would use the UniFi controller for this however it will not work the way I need it to without the USG device in addition to the controller appliance. I would have one interface to control and manage everything. Unifi FW and switches are glitchy and the cpative portal doesn't work as expected which is why I switched. pfSense can handle the throughput better. The captive portal on pfSense is rock solid when used with ubiquity AP's! Except for one little asthetic that I could live without, it would be nice to see. That is the point
  • Pfsense captive portal using zentyal server 6.0

    1
    0 Votes
    1 Posts
    717 Views
    No one has replied
  • CP Quota limit with Freeradius/MySQL

    3
    0 Votes
    3 Posts
    776 Views
    GertjanG
    @jarlel said in CP Quota limit with Freeradius/MySQL: but when using MySQL it doesn't... FreeRadius needs a book-keeping system where it stores its working data. A file system based method exists. MySQL can also be used, as many other databases. Up to you to create a database with tables that contain the correct fields etc. When you setup a limited amount of up- and download traffic for a user like this : [image: 1561639783765-1be2a07d-4c7a-4a85-aa01-54ddf96d31c4-image.png] You'll be seeing lines in the log : [image: 1561639869482-6468f8aa-e8f7-4b04-a759-111c40ba5036-image.png] When the quota (dialy in my case) is consumed, you see a line like this in the captive portal page : [image: 1561639969909-a359cccd-a09f-4698-92bb-da86d2b30a4c-image.png]
  • 0 Votes
    2 Posts
    211 Views
    DerelictD
    Why would your VLAN 10 clients need to access the RADIUS server?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.