No Internet on my captive portale

[ayoub92400]

I can't do it because I have multiple networks .

My APs are not used only for Pfsense they are also used for users who wants to connect via a radius server located on another network.

So I had to give a network only for my APs. :-\

The APs are tagged on multiple vlans that includes the Pfsense ones.

[doktornotor]

@ayoub92400:

The APs are tagged on multiple vlans that includes the Pfsense ones.

Good to mention after two days… Sigh.  ::)

Produce some network diagram with complete information. Enough time wasted already.

[ayoub92400]

Here is a schema to illustrate

[doktornotor]

Sorry, I cannot make anything useful out of that.

[ayoub92400]

Sorry  :-\ what king of information do you need?

[doktornotor]

Please, review this example. From the diagram you posted, I cannot even see what's connected where (WAN, LANx), let alone the IPs/subnets, VLANs, etc.

[ayoub92400]

Okay let me know if it's good or not

[doktornotor]

Yeah it's awesome except that we again lost the VLANs…

[ayoub92400]

oups…

[ayoub92400]

Hi everybody,

just to tell you you that I'vez changed my NAT configuration on my Netasq and now it's working for the network which is in 192.168.6.0.

My other network on 192.168.110.0 still have no CP and no Internet.

This interface has been set on OPT1 I don't know if it can explain that…

[comeback1106]

I think the problem client don't redirect to captive portal page is your dns. Don't manual config dns on your computer. I have see this problem and resolve this by using this way.

[ayoub92400]

I've managed to have internet on my Guest interface by working on the rules of pfsense , but no CP :(

I directly go to internet without authentication.

When I enter 192.168.110.253:8004 I see the CP but if I try to log in nothing happens.

I've entered the DNS adresse on the allowed IP addresses. Even the APs but it doesn't work.

This interface is an OPT1 I don't know if it matters.

[Gertjan]

…
and the rules on that interface are ?
Any special settings ? (looking at your schema's, I'm prepared to see a not-simple thing).

[ayoub92400]

No nothing special .

I put only 3 rules…


[Gertjan]

Looks good to me.
First rule : doing what ? but ok.
Second rul : a pass-all.
Third rule : IPv6 will never make it here, the IPFW (or whatever) will block any incoming Ipv6 traffic. The portal code isn't IPv6-ready neither.

When you disable the captive portal service, the interface does offer "Internet" access ?

[ayoub92400]

Yes I still have Internet when I disable the CP

[Gertjan]

Perfect.
That proves that firewall rules for that NIC are ok.

The issue must be: the captive portal doesn't understand your network setup.
Or: a DNS issue ? captive portal users should use the pfSense DNS and DHCP.

[ayoub92400]

I've setup a DHCP and my clients all have the pfsense as DNS and DHCP .

I really don't know what is happening.

I've setup the dns forwarder maybe I made a mistake.


[ayoub92400]

Good news! It works :D

I made a new fresh installation of Pfsense and now all the CPs are good!

[syan]

We had exact the same problem. Restoring an older (working) backup configuration doesn't fix the problem, a factory reset doesn't fix the problem, a fresh install and everything is working again. Really strange…