Possible to Captive Portal a Single IP Address?
-
I have an interesting situation, and I'm wondering if its possible.
My company's network is behind a pfSense box, which acts as the firewall, DHCP server, and outbound load balancer/failover. We also have a company wireless network protected by WPA2 encryption which allows access to all company assets. What we'd like to do is create a second wireless network running through a single wireless router in our front conference room for when non-employees come for meetings. We'd like to enable the captive portal for only users connecting from this second wireless network, displaying a page where they have to put in a passphrase that we can rotate fairly easily, as well as accepting a terms of use.
Any tips for making this happen?
-
If you put that router on a different interface you can enable captive portal on that interface. Probably not the ideal solution, but it will definitely work.
Also, be sure to set the router to AP mode, otherwise you'll see one person accepting the ToS and the rest getting through w/o clicking on anything.