I have a good amount of passthrough MACs as well and see no problems.  What are the symptoms you're seeing?  Stuff just not in the config?  Is there anything there if you ssh in and less the /cf/conf/config.xml (I'm making the assumption that you're adding this to the XML directly).

hi

i'll start by installing radius and learn how to set it up, i tried before but didnt succeed, do you sugest any link on how to configure radius?

thank you again

Hi All :

I am very happy to see someone can solve this problem, but 
  I am wonder why i have edit the /etc/inc/captiveportal.inc file and it don't work

???
  below is my captiveportal.inc …..
  -----
  $cprules .= << <eod<br># ... 10000-19899: rules per authenticated client go here...

add 19902 set 1 fwd 127.0.0.1,8000 tcp from any to any 80 in
add 19902 set 1 fwd 127.0.0.1,8000 tcp from any to any 8080 in

------

hope you can give me some advice ...

ps: 1. my english is poor
    2. the captive portal port is 8001, it is right ?</eod<br>

The changes that I mentioned in the link will be done for sure in 1.3 Scott Ulrich has already made some of the changes. There are a few more to go. I also would find it useful to have the users remain logged in after reboot or settings change so I'm considering taking that on. First I need to coordinate with another commiter that stated desire to work on Captive Portal.

I would think it's doable somehow but it's absolutely beyond my scope so I could be wrong. Post a bounty and see what happens and someone more knowledgable than me is thinking about that.

http://forum.pfsense.org/index.php/topic,8748.0.html

Yes, this applies to any version of pfSense and I doubt that this will work in 1.3 either as nobody intends to make this work currently.

You don't send the required form back to the cp for authentification.

From the cp-webguipage:

Upload an HTML file for the portal page here (leave blank to keep the current one). Make sure to include a form (POST to "$PORTAL_ACTION$") with a submit button (name="accept") and a hidden field with name="redirurl" and value="$PORTAL_REDIRURL$". Include the "auth_user" and "auth_pass" input fields if authentication is enabled, otherwise it will always fail. Example code for the form:

MAC passthrough on CP use keep-state option of ipfw. It's means that dinamic rule will be generate on first packet and than will be destroy by inactive timeout.
In your case, i think, inactive timeout come for some reason. But why? i don't know.
Let's look on your 'ipfw show'…

Possible? Sure, you can modify the logout window even more than just changing the color. Add additional functionality to it, it's all php.

thank hoba for information

Where'd you see the error?

Unfortunately I can't just use it because I get disconnected periodically. Minus captive portal it works fine.

system -> packages -> install freeradius server
service -> captive portar -> activate

and change proper settings, pretty self explained

/F

ok thank you.

The problem is i have only 700ko to store, so doing all that just for that  :-X

I'll try to reduce the size of my pictures, it will be easier  :D

Well no, like I said. I don't know if I should just leave it bridged or if I need the wi-fi on a subnet etc.

Edit: Righty, wireless OPT interface is now on 192.168.3.1. LAN is on 192.168.0.1. I've added a firewall rule and whammo, it works. I'm on the web from a wireless client. But, er, what happened to the captive portal? It's turned on allegedly…

Edit2: Ah, just needed to kill it and restart. It works. Yipee!

Thanks for your answer.
for instance, I'm going to use freeradius + ldap , and waiting for the 1.3 pfsense

thanks it works now  ;D

take a look in etc/hosts

Captive portal developement is mainly done in m0n0wall. We just sync over their code and to keep syncable we don't touch this portion of the code too much. If m0n0 adds it we'll sync it over but besides that I wouldn't expect this feature in pfSense soon.