Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Config Pf Sense to show only captive portal page.

    Scheduled Pinned Locked Moved Captive Portal
    15 Posts 5 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sujyo1
      last edited by

      Hello all…
      I need help to set up pfsense to show only captive portal page on OPT1 interface not as router (see attachment). I created a local captive portal user in pf and a custom page. All wireless clients must agree terms & condition & enter password to loginn. The main router is watchguard xtm 330 with 7 gig ports. Watchguard says my support is expire in 1/2015 & they can't help me!!  I have to pay extra for support!! So I open & config one interface in watchguard xtm330 assign Ip 10.10.10.0/24.
      My pf box...
      2.2.1-RELEASE (i386) full install
      Intel(R) Atom(TM) CPU N280 @ 1.66GHz
      2 CPUs: 1 package(s) x 1 core(s) x 2 HTT threads

      3 intel nics

      2 gb mem

      40 gb hd

      Thanks in advance....
      ![Pf Config.JPG](/public/imported_attachments/1/Pf Config.JPG)
      ![Pf Config.JPG_thumb](/public/imported_attachments/1/Pf Config.JPG_thumb)

      1 Reply Last reply Reply Quote 0
      • E
        EMWEE
        last edited by

        Just create a zone on your OPT1 interface and your good to go.

        1 Reply Last reply Reply Quote 0
        • S
          sujyo1
          last edited by

          thanks for reply…
          I do not want to use DHCP server on OPT1 just want to pass wifi traffic from ap through opt1 with only captive portal. Should I use static ip on opt interface setup? Should I have to do anything into NAT/Rules...etc to pass the wifi traffic?

          1 Reply Last reply Reply Quote 0
          • E
            EMWEE
            last edited by

            I don't know your subnet mask from the APs but it shouldn't be 10.10.10/24 since your WAN already uses that subnet.

            U should use another subnet.

            1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan
              last edited by

              @sujyo1:

              I do not want to use DHCP server on OPT1 just want to pass wifi traffic from ap through opt1 with only captive portal. Should I use static ip on opt interface setup? Should I have to do anything into NAT/Rules…etc to pass the wifi traffic?

              And how should these AP-Portal-Wifi visitors obtain an IP ?
              The portal can't work without a ststic IP, and its own DHCP server.

              Btw : your wan is 10.10.10/24 - change your OPT1 interface to 192.168.1.0/24

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              1 Reply Last reply Reply Quote 0
              • S
                sujyo1
                last edited by

                Thanks for reply.
                here what I want to accomplish. see attach pic

                ![Network diiagram1.JPG](/public/imported_attachments/1/Network diiagram1.JPG)
                ![Network diiagram1.JPG_thumb](/public/imported_attachments/1/Network diiagram1.JPG_thumb)

                1 Reply Last reply Reply Quote 0
                • S
                  sujyo1
                  last edited by

                  Thanks for reply Gertjan..

                  And how should these AP-Portal-Wifi visitors obtain an IP ?
                  From main router

                  The portal can't work without a ststic IP, and its own DHCP server.
                  Thanks. I was not aware of this!!

                  Btw : your wan is 10.10.10/24 - change your OPT1 interface to 192.168.1.0/24
                  I donot want to do double net.  Got it I have to do double net. or remove existing router and use pf as main router, set Opt to 10.10.10.0/24  and all ap to this subnet then turn on captive portal…

                  1 Reply Last reply Reply Quote 0
                  • E
                    EMWEE
                    last edited by

                    @sujyo1:

                    set Opt to 10.10.10.0/24  and all ap to this subnet then turn on captive portal…

                    No.

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Why not just renumber the OPT1 network?

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • D
                        doktornotor Banned
                        last edited by

                        @Derelict:

                        Why not just renumber the OPT1 network?

                        Way too simple… :P

                        1 Reply Last reply Reply Quote 0
                        • S
                          sujyo1
                          last edited by

                          @EMWEE:

                          @sujyo1:

                          set Opt to 10.10.10.0/24  and all ap to this subnet then turn on captive portal…

                          No.

                          Yes sir….The portal can't work without a ststic IP, and its own DHCP server.

                          Thank you guys...

                          1 Reply Last reply Reply Quote 0
                          • GertjanG
                            Gertjan
                            last edited by

                            Check:
                            Your LAN interface : 192.168.1.0/24 - ok, that the one by default. The LAN interface can have a DHCP server instance, or not.
                            So, make interface OPT1 (the portal interface) : 192.168.2.0/24 - active  a DHCP instance on it - and a DNS resolver. The activate the portal interface - chose a login method - add firewall rules to the OPT1 interface.

                            You can keep the WAN like 10.10.10.0/24

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            1 Reply Last reply Reply Quote 0
                            • S
                              sujyo1
                              last edited by

                              If I set opt1 ip to 192.168.2.0/24 and enable opt1 dhcp then, in this case I have to change all ap's static ips form 10.10.10.0/24 to 192.168.2.0/24 subnet.

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                Administering a network sometimes involves a little work.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sujyo1
                                  last edited by

                                  yap you right…not a professional like you guys...but try to find short cut and learn something new!! Thanks for reply

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.