Captive Portal: Enable Pass-through MAC automatic additions
-
At the Captive Portal (CP) setting page are two check boxes:
Enable Pass-through MAC automatic additions
&
Enable Pass-through MAC automatic additions with username–-------
I can understand the description of the 1st option (given at the web admin console), and can see it working in practise. However, the second option is uncertain for me.
Would anybody have a more "laymans" explanation of what the second option actually does ?
I think I just need to hear it described from a new perspective.
Thank you for any help.
-
Enable Pass-through MAC automatic additions with username
The second option is mainly used for the user manager (under the system menu) once a user is created and authenticated, then the clients mac gets added to the list of pass-through macs.
-
Thank you for your reply @LostInIgnorance, but I still don't get it! ???
The second option is mainly used for the user manager (under the system menu) once a user is created and authenticated, then the clients mac gets added to the list of pass-through macs.
What you describe, and what I can see (with my old misty eyes), is what appears to happen when the first tick-box is checked.
I fail to see anything "extra" happening to the firewall config when I enable the second option. Maybe it works with external authentication servers, rather than the local database?
Anyhow, for now I will leave it unchecked and treat is as a feature I do not need!
:)
-
You don't need both checked.
1. Are you using any user authentication for users on the captive portal?IF YES: Second box needs to be checked (Enable Pass-through MAC automatic additions with username). Setup login page for captive portal accordingly by adding below code to end of captive portal page html code and upload to pfsense box under the Services>captive portal
IF NO: If you're using no user management and only the first box needs to be checked (Enable Pass-through MAC automatic additions). Setup login page for captive portal accordingly by adding below code to end of captive portal page html code and upload to pfsense box under the Services>captive portal
-
Yes, I am using the Local User Manager for authentication, with the users added at the System/User Manager menu.
However, I have only the first box checked. The second is not checked.
This is the opposite of what you recommend, although the result appears to be the same (ie. after login the user mac address gets added to the passthrough list with a message like 'auto added mac for user bobby').
Perhaps PfSense has a fallback mode whereby it includes the username when it is present.
Anyhow, I will try switching the checkboxes at some convenient quiet time and experiment some more with a view to finding any potential subtle differences or misunderstandings.
If I spot anything I will write again.
In the meantime, thank you again for your help.
Michael.