LOG : unknown parameter zone: No se despliega portal cautivo en WiFi

RCTasso

Buenas tardes,
Tengo problemas conectando PC WiFi a través de AP Aruba . Cuando uso acceso via red cableada el portal cautivo opera bien pero cuando accedo via WiFi, el Browser queda esperando (se abre dos veces de echo) y en el log me aparece esto:

/index.php: Submission to captiveportal with unknown parameter zone:

agradecere si alguien me puede decir porque este error y ademas sin indica la CPzone.

gracias
Rafael

Gertjan

@RCTasso said in LOG : unknown parameter zone: No se despliega portal cautivo en WiFi:

agradecere si alguien me puede decir porque este error y ademas sin indica la CPzone.

This happens only when your AP is involved, right ?
So, you AP isn't playing well. It's doing more then just converting radio to electrical signals (Wifi to "RJ45").
Correct this, and you'll be fine.

RCTasso

This post is deleted!

RCTasso

Thank you Gertjan for your reply.

It's correct, only with AP. Making some SSID configuration , now captive portal appears one time only.

And in the login Page, at URL box appears:

192.168.69.9:8002/index.php?zone=zportal69&cmd=login&mac=7c:7a:91:24:17:65&essid=P-portal&ip=192.168.70.38&apname=AP%20325%209a%3Aee&apmac=a8%3Abd%3A27%3Acc%3A9a%3Aee&vcname=SetMeUp-CC%3A9A%3AEE&switchip=securelogin.arubanetworks.com&url=http%3A%2F%2Fwww.msftconnecttest.com%2Fredirect

And, when I enter the user and password, appears a browser with URL Box

192.168.69.9:8002

without go to any where.

In the log shows:
Nov 27 17:59:53 logportalauth 5233 Zone: zportal69 - ACCEPT: ruser1, , 192.168.69.10
Nov 27 17:59:53 php-fpm 5233 /index.php: Submission to captiveportal with unknown parameter zone:

tahnk you

Gertjan

You're using pfSEnse 2.4.4-p3, right ?

This part :

192.168.69.9:8002/index.php?zone=zportal69

is ok.
It should be followed by

&redirect

and then the rest of the original URL request.

That what happening here https://github.com/pfsense/pfsense/blob/65db20674d716208e340b96471ff98d1bb0c957b/src/usr/local/captiveportal/index.php#L92

"Something" is really messing or messed up.

The most simple advice would be : take the AP out, use another AP that should do what it should do, nothing more.

Btw :

Nov 27 17:59:53 logportalauth 5233 Zone: zportal69 - ACCEPT: ruser1, , 192.168.69.10

The MAC is missing. Did you remove it ?

RCTasso

hello Gertjan
yes, Version 2.4.4-RELEASE-p3 (amd64)

I did not get &redirect
browser show blank page with 192.168.69.9:8002/ in URL box

Logs:

With IAP Aruba 225 only
Nov 28 10:16:43 logportalauth 339 Zone: zportal69 - ACCEPT: ruser1, , 192.168.69.20
Nov 28 10:16:43 php-fpm 339 /index.php: Submission to captiveportal with unknown parameter zone:

With IAP Aruba 325 only
Nov 28 10:22:31 logportalauth 340 Zone: zportal69 - ACCEPT: ruser1, , 192.168.69.10
Nov 28 10:22:31 php-fpm 340 /index.php: Submission to captiveportal with unknown parameter zone:

Packet capture
10:32:15.503828 a8:bd:27:cc:9a:ee > ff:ff:ff:ff:ff:ff, Unknown Ethertype (0x8ffd), length 60:
10:32:16.503707 a8:bd:27:cc:9a:ee > ff:ff:ff:ff:ff:ff, Unknown Ethertype (0x8ffd), length 60:
10:32:16.746037 a8:bd:27:cc:9a:ee > ff:ff:ff:ff:ff:ff, Unknown Ethertype (0x8ffd), length 60:
10:32:17.503749 a8:bd:27:cc:9a:ee > ff:ff:ff:ff:ff:ff, Unknown Ethertype (0x8ffd), length 60:
10:32:18.069034 ARP, Request who-has 192.168.70.38 tell 0.0.0.0, length 46
10:32:18.403933 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 0
10:32:18.404036 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 0
10:32:18.406651 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 0
10:32:18.408566 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 645
10:32:18.408619 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 0
10:32:18.412942 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 1460
10:32:18.412953 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 517
10:32:18.413053 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 0
10:32:18.415689 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 0
10:32:18.417763 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 0
10:32:18.418352 IP 192.168.69.10.49249 > 192.168.69.9.8002: tcp 0
10:32:18.418401 IP 192.168.69.9.8002 > 192.168.69.10.49249: tcp 0
10:32:18.503841 a8:bd:27:cc:9a:ee > ff:ff:ff:ff:ff:ff, Unknown Ethertype (0x8ffd), length 60:
etc

thanks you
Rafael

Gertjan

@RCTasso said in LOG : unknown parameter zone: No se despliega portal cautivo en WiFi:

IAP Aruba 225 or 325

I don't know what these are.
Never saw them before.

Knowing that a direct cable connection is working fine : your problem is the AP.

RCTasso

Thanks,

I had cheked the : MAC filtering [] Disable MAC filtering

Now uncheked:
Nov 28 11:14:58 logportalauth 339 Zone: zportal69 - ACCEPT: ruser1, 84:d4:7e:c5:e7:98, 192.168.69.20
Nov 28 11:14:58 php-fpm 339 /index.php: Submission to captiveportal with unknown parameter zone:

this MAC is AP MAC.

rafael

Gertjan

Captive portal works best with a MAC address.

The fact you receive the MAC from your AP means : your AP is works in router mode - it's not a real AP.

Disable the router mode, do not use the WAN port if it has one - disable it's DHCP server if it has one.
If your pfSense captive portal NIC has 192.168.69.1/24 - give it a static IP like 192.168.69.2 / 24 - gateway 192.168.69.1 - DNS 192.168.69.1