hi Sylvain,
one way to do this is write a custom portal in PHP + enable captive portal + enable freeradius2 + setup MySQL server. I recently  did an exact setup for an Expo.

Regards,
Vikram

@MohamedMagdi:

Can you discuss in more details i made what you said but still don't work !!
…

Actually, there is need to "discus". Everything has been written down a long time ago ;)
Go here : pfSense Forum » pfSense English Support »Captive Portal
and checkout the very first 'Sticky' subject : PFsense 2.1 MultiCP and https with Windows Radius Guide

If you are using https (SSL) and you use are using pfSense internally generated certificates, skip everything up until DNS Forwarder (but feel free to read all of it).
Read DNS Forwarder
Read Captive Portal
Skip Authentication settings
Read HTTPS
Read A note about DNS

Will it be possible for you to update "services_captiveportal_vouchers.php" to run smoothly with pfSense 2.3 ?

@kapara:

Use Unfi AP's. They rock!!!  Cheap and work really well!!!  Super easy to provision!!!

I know they are brilliant I have few of them in another place, but coming back to place mentioned in this topic I am now using Tenda's (ceiling version) and I must say they do the job. Even it surprised me, because they support IEEE 802.1Q (QVLAN) and I can setup 4 different SSID's with 4 different subnet's using one cable connection and they works perfect with pfSense vlans with tags.

Yes it is solved in 2.3. lighttpd no longer exists, that's been switched to nginx which has no such problems.

you can create a schedule in rule with destination to 80 and 443 ports.

The virtual machine does not use dns or routing of host machine.
And everything works fine when the captive portal is disabled…
I'd like to find someone who has the same configuration (pfsense + captive portal and vouchers) in Hyper-V environment and it's working fine and correct.

So after our supervisor borrowed the router I'm using as a WAP, I remembered I still have another REAL (lol) AP.
I set it up and tried changing between the APs. Now I don't need to re-login.

"Much ask. Such noob. Wow."

lol TYVM. :)

Behind the "Captive Portal NIC", there shouldn't be any device that acts as a router.
(Some special VLAN cases might be an exception here)

'Router mode' should be deactivated on Wifi Access Points.

I protect my AP's with a firewall, so no connection is accepted coming from clients on "Captive Portal OPT1", except those coming from pfSEnse, so I can manage my AP's.

Two choices:

1. Do not forward HTTPS requests to the captive portal. HTTPS requests just hang.

2. Forward HTTPS requests to the captive portal and generate certificate errors for your clients.

Neither is perfect, but option 1 is IMHO better than option 2.

This is not a captive portal problem. HTTPS/SSL/TLS is designed to prevent a man in the middle from displaying content without generating a certificate error.

Since this thread appears to be written entirely in Japanese Haikus: ;)

A common problem
While info is lacking
No answer may be known

What hardware are you using?  Alix? I would think even a pentium 4 could handle this with no issue.  What is the make of the AP?  Is your link 10,100,1000?

@Gertjan:

Time to detail :
Your network setup.
DHCP server settings
How many entries in dhcp leases file (here : /var/dhcpd/var/db )

Use also all the https://www.google.fr/search?q=FreeBSD+dhcpd:+DHCPDISCOVER+no+free+leases&ie=utf-8&oe=utf-8&gws_rd=cr&ei=B6XzVtL1L4Pyav2Fr_gJ wisdom …..

i am running captvie portal with almost 220 device registered with us. i have 20 Mbps two links that i am using both by loadbalancing.

I suggest to set the redirection url before and after authentication
it is good also to isolate these different subnets of captive portal interfaces from eachother by using Aliase and apply this aliases in the firewall rules of each captive portal interface.
i read once but i am not sure if this is correct , Apply Captive portal always on Opt interface not LAN interfcae

Bet Wishes

@assistenzanet95:

@Derelict:

So when LAN is disabled can CP clients resolve names?

Can they ping OPT1 address?

Do you have anything in Allowed IP addresses or Allowed Hostnames?

What happens if you put http://10.10.10.10/ into a browser on a CP client?

What version of pfSense is it?

No when i disable LAN i can't resolv names on CP

You have something hosed. You are going to have to post screenshots of all your interfaces, all your firewall rules, and all your CP settings. Could be one or more of of a 1000 different things.

Yes i can ping the entire OPT1 network, but i can't open the  webpages oh the antennas.

I presume antennas means access points. I don't know why you would want to be able to access your access point web interfaces from the portal network. Most people want the opposite.

Yes in the allowed IP addresses i have about 70 antennas and about 20 Allowed Hostnames

Again, no idea why you care about the access point web interfaces from the portal network.

Nothing happens if i try to open http://10.10.10.10, my OPT1 address is 192.168.100/22

The point is to eliminate the need for working DNS to get the portal page. If it doesn't come up it's broken. Again, screenshots of everything.

My version of pfSense is 2.1.1

Ancient. Upgrade. At least to 2.1.5 if you want to take small steps.

@strike101:

the voucher is set to expire after 3 days

i haven't checked the DHCP lease time.. it's on default AFAIK,

Takes 3 seconds to check ….. and far less then 3 days by default .....