Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CaptivePortal with freeradius + mysql: Max-Daily-Session

    Scheduled Pinned Locked Moved Captive Portal
    32 Posts 7 Posters 24.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nachtfalke
      last edited by

      Why do you use MxSQL ?
      It can be done without MySQL.
      How many users do you have on CP ?
      If there are not mor ethan 500 users it will be probably ok with some "up to date" hardware and without mysql.

      1 Reply Last reply Reply Quote 0
      • DonnyD
        Donny
        last edited by

        @Nachtfalke:

        Why do you use MxSQL ?
        It can be done without MySQL.
        How many users do you have on CP ?
        If there are not mor ethan 500 users it will be probably ok with some "up to date" hardware and without mysql.

        Hello Nachtfalke
        I just repeat your question.

        "Why do you use MxSQL ?"
        Ans: Because at school, there are more than 800 students.

        "It can be done without MySQL"

        Could you explain how could be done without MySql, if the school has more than 800 students ?
        You mean that I have to type all 100-450 users name at FreeRadius users tab and then using them together with FreeRadius and Captive Portal.

        Also, How can you limit bandwidth per "Group" if your school has more than 800 students?

        "If there are not mor ethan 500 users it will be probably ok with some "up to date" hardware and without mysql"
        You mean that I have to buy a new hardware if I have around 500 users.

        I hope that I don't ask you too much.

        Thank you
        Donny

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by

          @Donny
          I am so sorry. I forget about the fact that you would like to use group limits. This is not working without any database. So sorry for that.

          Hardware:
          No need to buy new hardware if you are running MySQL on an external server. Most load will be on the MySQL database for the authentication and accounting. This can be done with lots more than your 800 users.

          Sorry that I cannot help you with the MySQL part. Perhaps ask user Rampage in a personal messag how he created the sql tables.

          1 Reply Last reply Reply Quote 0
          • DonnyD
            Donny
            last edited by

            @Nachtfalke:

            @Donny
            I am so sorry. I forget about the fact that you would like to use group limits. This is not working without any database. So sorry for that.

            Hardware:
            No need to buy new hardware if you are running MySQL on an external server. Most load will be on the MySQL database for the authentication and accounting. This can be done with lots more than your 800 users.

            Sorry that I cannot help you with the MySQL part. Perhaps ask user Rampage in a personal messag how he created the sql tables.

            Thank you, Nachtfalke

            I will try to contact him/her soon. I still keep testing it by my self first before I am asking some one to help. To be honest I have tested almost one week now but bandwidth limits for group is not successed. To use MySql users on database with Captive portal and MySql to authentication, I do not have any problem. Now time to get rest.

            Anyway, thank you again

            Donny

            1 Reply Last reply Reply Quote 0
            • N
              Nachtfalke
              last edited by

              Just to make sure - you have enabled accounting on mysql and captiveportal, right ?

              1 Reply Last reply Reply Quote 0
              • DonnyD
                Donny
                last edited by

                @Nachtfalke:

                Just to make sure - you have enabled accounting on mysql and captiveportal, right ?

                Thank you Nachtfalke

                I will try it again soon. Hë, tired.

                1 Reply Last reply Reply Quote 0
                • R
                  Rampage
                  last edited by

                  it's not enaugh to set the limit on the radius server, you also need to enable the feature on the NAS (captive portal setup) leaving fields empty.

                  Then the captive portal will refer to the values specified in radcheck or radgroupcheck in your mysql database.

                  the operator is :=

                  sorry if i took that long to reply, but it's been a while since i last visited the forum :)

                  1 Reply Last reply Reply Quote 0
                  • A
                    asura
                    last edited by

                    in sorry if im asking something silly ..

                    it is possible to set an 'airtime' for every voucher? using CP or maybe thru freeradius?
                    for example user will able using 30minutes for surfing and download within 2 days.

                    scenario example, user using 5 minutes and then log out. login again for 10 minutes more.
                    user keep going login and logout for 2 days until his time limit reach 30 minutes as i set.
                    in this case user will have 2 days 'airtime' and 30 minutes quota of time (time limit)

                    sorry for my bad english ..thanks in advance to everyone

                    1 Reply Last reply Reply Quote 0
                    • E
                      eri--
                      last edited by

                      You need a radius server of sorts for that.

                      1 Reply Last reply Reply Quote 0
                      • A
                        asura
                        last edited by

                        im installed freeradius2. after looked around for a few hours inside freeradius2.
                        kill some of my times google around but i found nothing similar to what i need

                        i managed to create username and password. set a limit and quota for each of them.
                        but what i need is user only able to access using generate voucher without a username.
                        for example:
                        voucher package 1 : 30 minutes quota within 1 day (24hours) time limit(airtime)
                        voucher package 2 : 1440 minutes quota within 3 days (72hours) time limit(airtime)

                        im sorry if im asking to much, im very new with pfsense but im willing to learn more.
                        i still do not have any idea what to do and where to start ..pls link me to any tutorial
                        thanks

                        1 Reply Last reply Reply Quote 0
                        • N
                          Nachtfalke
                          last edited by

                          http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package

                          1 Reply Last reply Reply Quote 0
                          • A
                            asura
                            last edited by

                            @Nachtfalke:

                            http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package

                            i already read that and still i cant find the way to solve my problem..
                            anyway thanks for ur kind reply

                            1 Reply Last reply Reply Quote 0
                            • N
                              Nachtfalke
                              last edited by

                              @asura:

                              @Nachtfalke:

                              http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package

                              i already read that and still i cant find the way to solve my problem..
                              anyway thanks for ur kind reply

                              The quota and limit functions only work with username/password.
                              The problem is that username/password is stored on freeradius2 users file and the vouchers are stored on the CP itself.

                              And if you enable RADIUS authentication and CP with vouchers there is a bug in CP that if you enable "re-aithenticate every minute" on CP the CP sends the voucher code as username to the RADIUS server and the RADIUS server of course does not know this "user".
                              I described this here:
                              http://redmine.pfsense.org/issues/2155

                              So I would say it is only possible to use voucher which has time limit or you use username/password which could have time limit and/or quota.

                              1 Reply Last reply Reply Quote 0
                              • A
                                asura
                                last edited by

                                u mean there is no way for voucher on CP to work together with freeradius?

                                after time limit reached. My costumer need to get new ticket/voucher to relogin via CP.
                                i think it is impossible to create hotspot for making money using freeradius  ;D

                                1 Reply Last reply Reply Quote 0
                                • N
                                  Nachtfalke
                                  last edited by

                                  @asura:

                                  (…)
                                  i think it is impossible to create hotspot for making money using freeradius  ;D

                                  This statement is right if you focus on the freeradius2 package offered for pfsense.
                                  but it is wrong if you use CaptivePortal from pfsense with another radius solution like daloradius or something else which focus on such things like "making money" and do accounting in this way.

                                  the freeradius2 package on pfsense is more a security tool within a company or at home to secure your wireless network, your company LAN or VPN with One-Time-Password.

                                  You have to find the best solution for your needs :-)

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    asura
                                    last edited by

                                    @Nachtfalke:

                                    the freeradius2 package on pfsense is more a security tool within a company or at home to secure your wireless network, your company LAN or VPN with One-Time-Password.

                                    You have to find the best solution for your needs :-)

                                    thankss ..i have noticed that.
                                    mayb i need to put it on try and see how its gonna be.  ;)

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      Nachtfalke
                                      last edited by

                                      Yeah, or just improve the freeradius2 code and put in some more features  ;)

                                      1 Reply Last reply Reply Quote 0
                                      • X
                                        xbipin
                                        last edited by

                                        can some1 provide me the mysql schema with some sample data to use captive portal with freeradius2 on pfsense using alix and an external mysql db as im about to develop a whole web GUI in php which can be used to edit the mysql db directly without phpmyadmin etc making life easier for many such as creating new users, editing them, creating data transfer based recharges etc

                                        1 Reply Last reply Reply Quote 0
                                        • N
                                          Nachtfalke
                                          last edited by

                                          
                                          /usr/local/share/examples/freeradius/raddb/sql/mysql
                                          /usr/local/etc/raddb/sql/mysql
                                          
                                          

                                          These schemes come with freeradius. I think it will help you.

                                          Or take a look here at chapter "Populating MySQL"
                                          http://www.frontios.com/freeradius.html

                                          1 Reply Last reply Reply Quote 0
                                          • X
                                            xbipin
                                            last edited by

                                            is the schema same as for freeradisu2 package for pfsense as i need it for the package which is available for pfsense

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.