Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CP Redirect Problem

    Scheduled Pinned Locked Moved Captive Portal
    14 Posts 6 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • 4
      4rdorin @Gertjan
      last edited by

      Hi,
      Thanks for your answers!

      After investigating the issue, I found out something interesting: this problem only happens in Huawei and Xiaomi devices: the device "polls" the connection, it reveives IP/DNS/Gateway by DHCP, but it doesn't show the captive portal.
      The captive portal is working perfectly in any other device.

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @4rdorin
        last edited by

        @4rdorin said in CP Redirect Problem:

        the device "polls" the connection

        Polls ? It's doing what ?
        Any modern OS, after LINKUP and receiving an IP/Gateway/DNS throws out a "known" http (not https) request.
        Example : Apple devices use this one http://captive.apple.com/hotspot-detect.html
        There should be a known answer back, it's the one-word "Success" - check it out yourself by clicking on the link.

        If the answer is anything else, a browser is fired up, using again the same URL.
        This time the answer is shown in the browser. It will be the captive portal logging page.

        To make a long story short : captive portal is actually an OS thing not pfSense ;)

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        4 S 2 Replies Last reply Reply Quote 0
        • 4
          4rdorin @Gertjan
          last edited by

          @Gertjan
          I sadly don't have a Huawei or a Xiaomi device here to test, but I tried to see what is exactly the behavior of an Android that is working correctly and the behavior is what you said: it sends a HTTP request to connectivitycheck.gstatic.com/generate_204 (that is what i meant with "polls") and then the captive portal shows and everything works perfectly.

          However this is not the case in a lot of Huawei or Xiaomi devices, and I don't know what could be causing this behavior.
          I don't know if anyone else has had some captive portal problems with Xiami/Huawei devices or if I am doing anything wrong.

          GertjanG F 2 Replies Last reply Reply Quote 0
          • GertjanG
            Gertjan @4rdorin
            last edited by

            @4rdorin said in CP Redirect Problem:

            However this is not the case in a lot of Huawei or Xiaomi devices, and I don't know what could be causing this behavior.
            I don't know if anyone else has had some captive portal problems with Xiami/Huawei devices or if I am doing anything wrong.

            Well ... devices - OS's that is - that do not support captive portals will have to deal with not happy clients. That's their problem.
            It's not a 'pfSense captive portal' problem.

            I'm running the captive portal for a hotel, and these days it's very rare to have a client say : "doesn't work". If so, I take my device and show him it does. The client will ask : "what to do so it works for me ?" I'll say "Next time you choose a phone, add 'captive portal recognition' to your list - or call your support." Problem solved ^^

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • F
              free4 Rebel Alliance @4rdorin
              last edited by free4

              @4rdorin Are you talking about Xiaomi/Huawei phones that are coming from mainland china?

              Because of the chinese firewall, chinese phones (the ones without play store nor Google services) cannot use the captive portal detection system (
              connectivitycheck.gstatic.com is blocked in china)
              Because of that, Xiaomi and Huawei disabled the captive portal check on some phones and used other URLs on others ( http://connect.rom.miui.com/generate_204 , http://www.qualcomm.cn/generate_204 ).

              It could be the cause of your problems. There is two settings on Android (captive_portal_detection_enabled , captive_portal_mode) that enable/disable the check and give the URL used for test. Maybe you sould check these settings when an user complains?

              1 Reply Last reply Reply Quote 0
              • S
                sudarshana @Gertjan
                last edited by

                @Gertjan Using some Huawei phones to log the capacitive portal after entered user name and password show you are connected but we can't surf internet, only show above message.

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan
                  last edited by Gertjan

                  When you see "You are connected", you see this in the captive portal status list :
                  5fade80d-70a1-42c2-8a46-03b6c3d53ff5-image.png

                  and you see this in the captive portal's firewall table rules :

                  --- table(cpzone1_auth_down), set(0) ---
                  ......
                  192.168.2.19/32 2043 44431 53938345 1583485699
                  
                  --- table(cpzone1_auth_up), set(0) ---
                  .....
                  192.168.2.19/32 68:5a:cf:49:04:c2 2042 28623 4002011 1583485346
                  

                  Or are the ipfw rules absent ?
                  If so : it's a known issue, you'll find the patch in this forum,
                  or : stop editing captive portal settings while captive portal user are logged in. You have to disconnect them all if you have to edit the settings.

                  Btw : the phone can use any http:// url to test if it has an 'open' Internet when activating the Wifi portal connection. The URL should return a page, a simple text line actually something like "Success", when it succeeds to connect.

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • R
                    rommelotero
                    last edited by

                    anyone found a solution to this matter?

                    GertjanG 1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan @rommelotero
                      last edited by

                      Since 2020 ?
                      After two pfSense updates ?
                      Probably, if there was a problem, it has been resolved (on the Huwai / Androis OS side).
                      I've seen plenty of "HUAWEI:android:xxxxxx" devices on my captive portal.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      1 Reply Last reply Reply Quote 0
                      • R
                        rommelotero
                        last edited by

                        I still hace this issue with Xiami devices

                        GertjanG 1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @rommelotero
                          last edited by

                          Xiami devices ?

                          You mean Xiaomi devices ? These are based on the Android OS, right ? So, they should work. I see the connected don my captive portal.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.