Possibly overkill using pfsense?

jimp

It depends on what you will end up doing with it over the long term.

If all you need is the portal, m0n0wall may be good enough.

militarymedic23

I looked through the docs on m0n0wall and it almost seems the majority of options match up fairly well with pfsense.
I'll play around with the setup I have now for a bit and see where it goes.

But to clarify for what I am looking into,
I would turn DHCP off, NAT off, Captive Portal on. But the config details on what else needs to be configured so LAN services pass through to requesting clients is still baffling me.
I setup pfsense in vmware, have a client vm attached to the WAN vswitch but my attempts so far to disable the mentioned services still won't let the client vm get a dhcp address or see any network resources.
Once I get a config down I can move the setup to a larger environment.

Thanks again

Cry Havok

Are you trying to set up a transparent captive portal? In other words, do you want to keep a single flat network, not split your LAN into 2 segments?

militarymedic23

actually yes!

Cry Havok

A quick search found this old thread which suggests that it won't work in 1.2.3. I don't know about 2.0.

militarymedic23

hmm… would this be the point were m0n0 may have this type of functionality working?

nzbreser

Looking at your request there isn't alot of real detail so I won't assume or offer relative answers however
psfsense Captive portal can work well if setup correctly.
Networking features natting/dhcp/routing/vlans all work with captive portal in place.
Captive portal offers 3 types of authentication passthrough/local db/radius. In passthrough you still need to setup f/w rules
to prevent or allow traffic to pass. With the others you have to have a client dns entry pointing to your pfsense for the splash page to
work.
Captive portal is limited in functionality as compared with mikrotik and others; so the decision is commercial as well as functional.
If your offering hotspot services then pfsense will be limited; however if provisioning straight access alone then suitable.

eri--

@nzbreser
what is missing from mikrotik in CP?

savago

@ermal:

@nzbreser
what is missing from mikrotik in CP?

Maybe this one,pfSense do not support remote disconnection using POD packets, instead it is using
reauthentication (Reauthenticate connected users every minute,i think there must be options 1/5/10 min)

joe_adk

i think there must be options 1/5/10 min

This would be a very welcome addition, at least for me.

lsoltero

to set the re-authentication interval edit /etc/inc/captiveportal.inc and change it to whatever you want.

/* initialize minicron interval value */
$croninterval = $config['captiveportal']['croninterval'] ? $config['captiveportal']['croninterval'] : 60;

/* double check if the $croninterval is numeric and at least 10 seconds. If not we set it to 60 to avoid problems */
if ((!is_numeric($croninterval)) || ($croninterval < 10)) { $croninterval = 60; }

note that you can also set it in config.xml but there is no gui to do this for you. Either way works.

–luis

eri--

You can set this on the gui

savago

@ermal:

You can set this on the gui

Where is located this options ?

savago

UP