Needed Configuration for Captive portal MAC Authentication using Freeradius MACs tab
-
Good night friends, I'm a new user in Pfsense and I need to create a captive portal in two separate interfaces. So far I managed without problem, but I need users to be authenticated by MAC ADDRESS through a pre-registration, within FreeRadius.
But even if I create an entry in the MACs tab in FreeRadius and select the MAC ADDRESS Authentication option in the captive portal, the devices do not authenticate, I always get the authentication failed errorIn the case in question, I need it to be done through FreeRadius because if I use the MAC ADDRESS tab directly in the Captive portal, Pfsense does not count the number of connected users.
can you help me?I searched the entire internet and didn't find any topic or tutorial based on MAC ADDRESS and freeradius on the captive portal.
Thanks to all!
-
Normally, I use the classic user/password Freeradius authentication.
To make MAC auth work, I had to :
Check this option on the main Freeradius settings page :
Switch to Radius MAC
I discovered that I had a enter 'something' for "RADIUS MAC Secret" - if this field is empty pfSense doesn't contact the radius server. ' The manual told me that that field can not be empty. Ok, I entered 'secret', because : why not ;).
It's very possible that this "RADIUS MAC Secret" isn't really used.Then I added my phone's MAC to the list :
When I connected to the wifi portal network, I saw the word "Succes" and was connected.
-
@danicavini
Thanks, i will try it ! -
-