The contents of the .csv come straight from the voucher program so yes, it's most likely something in how that is formatted coming out of voucher.c.

Hello All, Replying to my own post. After looking at the CP log I did see an error being thrown in regards to "unable to determine mac filter". The error did suppest to "Disable mac filtering in the pfSense GUI,which I did. CP works fine after making this change. Thank You, Barry

I finally got this sorted, and to help anyone else out here is what worked for me (i am writing this from home mostly from memory, but you will get the idea), most of what i have done is based on this link http://forum.pfsense.org/index.php/topic,57260.msg305604.html#msg305604 Get the basic captive portal and freeradius setup and make sure it works with local users. Install php-mysql support as detailed at the above link Edit the file /usr/local/etc/raddb/sql/mysql/counter.conf and replace with the contents of the one attached to this post. Edit /usr/local/pkg/freeradius.inc and add the counters from the counter.conf (DailyDataCounter, MonthlyDataCounter & NoResetCounter) to the "Instantiation" section of raddb.conf and sites-enabled default.conf. I removed the references to the other time based counters i.e. daily, weekly & monthly. This file needs to be modified otherwise any changes to the raddb.conf file will reset on a reboot Modify the default captive portal and error page with the one attached to this post and add the other attachents through captive file manager. Enable sql otherwise it will not be used Run the sql in the attached "SQL-Groups.txt" to create groups to assign amount of traffic. make sure the captive portal is set to auto authenticate every minute. In theory any one who connects through the captive portal will be asked to register, and they will by default have 30mb of daily download. This may not be the best way but and if anyone wants to correct me go for it as i just want to learn. (captiveportal-cp.css).txt (captiveportal-error.htm).txt (captiveportal-initial.php).txt (captiveportal-register.php).txt (counter.conf).txt (SQL-Setup.sql).txt

pfSense 2.2 will actually be gaining a "global MAC ban" tab in CP that will redirect certain users to a special CP page if their MAC is "banned" – that might get you partway there, but the code does not exist yet (it's sponsored, in the queue to be added)

I had upgraded to 2.0.3-RELEASE, but the issue still exists. Same log found in system log and portal auth log. Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20001 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20000 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20001 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20000 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20001 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20000 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument' Jul 29 14:17:09 php[16361]: : The command '/sbin/ipfw pipe 20001 delete' returned exit code '1', the output was 'ipfw: rule 1: setsockopt(IP_DUMMYNET_DEL): Invalid argument'

@sdtelecom: Try to set the Maximum Concurrent Connections to 1. hope this helps This didnt helps. Minimum of value is 4, max 100.

Ok, Anyway it works now, that's the important thing.. ;D

Theoretically it's the same handling, but it works with 2.1 In 2.0.2 and 2.0.3 the last activity date isn't reseted nor updated always. So pfsense logouts useres just after login. I use an external Radius server for authorization.

Got it, thanks wallabybob is working  ;D

Replying to my own post: Turned out that indeed the layer 2 filtering was turned off! The culprit is: net.link.ether.ipfw!!! Once turned on:                         sysctl net.link.ether.ipfw=1 Everything just started working! The question is: Do I need to put this is /etc/sysctl.conf? /wai-sun

@rhy7s: Have you considered Gargoyle Router instead? You could set up a fairly hands-off quota and throttle system. No, I need a captive portal to control and log access by user account, regardless of what computer or device they're using. Right now Zeroshell seems to be working, so I don't want to upset things.  If Zeroshell's rudimentary logging becomes a problem then I'll revisit other solutions like pfSense.

The place I used one, it was attached directly to a windows PC. It could not attach to pfSense. What you'd normally do is export a roll of vouchers from pfSense to a CSV file and them import it into windows somehow (e.g. LO Calc, Excel, etc) and then print them to the printer from there in a batch, and then have them hand out the slips as needed. If you want "on demand" printing where the vouchers are not printed until they're requested, that's a lot harder. It would involve a program on the front desk PC that could trigger the printing of just one voucher at a time from the roll. Possible, but not as simple as pre-printing them. Someone else here may have better advice for that.

I had the same problem here. output of pkg_info | grep mysql is: mysql-client-5.5.21 Multithreaded SQL database (client) mysql-server-5.5.21 Multithreaded SQL database (server) After running: touch /etc/php_dynamodules/mysql /etc/rc.php_ini_setupphp -m | grep mysql mysql mysqlnd /etc/rc.restart_webgui No result. But when I restart the webconfigurator bij the menu (option 11)  phpinfo() gives me a positive I guess a bug

An alternative to this is to use an IP address of the NTP server instead of its hostname :) or Make sure that your NTP server hostname is resolvable by your DNS server. it should boot faster.