Control Users Bandwidth in CP
-
well,
there is two options that could fulfill your needs:
- you could use limiters (codel), which are firewall QOS rules
- you could use a radius server to define per-user bandwidth control. this is an avanced feature..please see the documentation for details : https://docs.netgate.com/pfsense/en/latest/captiveportal/captive-portal-configuration.html#authenticating-captive-portal-users-using-a-radius-server
-
Dear @free4
Thanks for your reply. What do u mean by "Codel'and for the freeradius, the documentation not covered it totally in details. if you have a better documentation or videos it will be better. also I need to integrate it with LDAP windows AD -
@mohkhalifa said in Control Users Bandwidth in CP:
What do u mean by "Codel'
It starts here Firewall > Traffic Shaper > By Interface
Read https://forum.netgate.com/category/26/traffic-shaping and related Netgate videos. he subject is huge.
Btw : I use myself the captive portal and combination with FreeRadius, so I can attribute speeds for each user.
No "help me" PM's please. Use the forum, the community will thank you.
Edit : and where are the logs ?? -
Dear @Gertjan,
Thanks for your reply. How can I integrate my Active Directory "LDAP"with FreeRadius to control user bandwidth ?
it will be appreciated if you send me some detailed documentation.
Thanks -
I don't know what this is :
@mohkhalifa said in Control Users Bandwidth in CP:
Active Directory "LDAP"
Some Microsoft functionality ?
I'm using FreeRadius with some sort of MySQL (MariaDB) database back end.
No "help me" PM's please. Use the forum, the community will thank you.
Edit : and where are the logs ?? -
@mohkhalifa https://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO
-
@free4 thanks but it's not for pfSense, it's general
-
@mohkhalifa yeah...im not talking About pfsense here
if you are looking for having per-user bandwidth, then you will have to use a Radius server. pfsense does not allow you to perform per-user bandwidth control when using LDAP authentication method
my recommendation : install a freeradius on a separate server/virtual machine. this radius server would use your LDAP server as source, and would define other rules for per user bandwidth
this Radius server would then be used by your pfsense for authenticating users
for information, It is technically possible to install freeradius directly on pfsense(using freeradius3 package)...but I would not recommend it to you: this package is mostly unmaintained, and suffers from bugs. if you are still interested, you should have a look to this forum post
-
@Gertjan "I don't know what this is :" I want to authenticate using the Windows Server Active Directory users. also, to add bandwidth limit for each one. that's it
-
@mohkhalifa said in Control Users Bandwidth in CP:
"I don't know what this is :"
I was kidding ^^
What I know is : pfSense can interface with the package FreeRadius, and for that matter with any Radius server.
You'll be needing the latter. -
@free4 said in Control Users Bandwidth in CP:
my recommendation : install a freeradius on a separate server/virtual machine. this radius server would use your LDAP server as source, and would define other rules for per user bandwidth
Dear @free4 really Thanks for your kind help. If you please can you send me a links for a documentation or video tutorials to do that task.
-
@Gertjan can you point me to a video tutorial or any tutorial on how to this. i have CP and also using SQUID proxy transparent, the only lacking is to connect freeradius so i could also limit bandwidth per user in a single lan. thanks.
-
@alpax8 said in Control Users Bandwidth in CP:
@Gertjan can you point me to a video tutorial or any tutorial on how to this. i have CP and also using SQUID proxy transparent, the only lacking is to connect freeradius so i could also limit bandwidth per user in a single lan. thanks.
Dear @alpax8,
Please note that I'm NOT using FreeRADIUS, I'm using pfSense with Windows RADIUS Server and everything is working amazing. -
@mohkhalifa oh ok. thanks.
-
@mohkhalifa
Well, I found 2 threads about Microsoft NPS posted by you in CaptivePortal category, and I am glad that you figured out how to use Microsoft NPS as radius server for pfSense authentication.It's better that you can take some time to share your experience in your own thread, It will help me and others who may got the same issue.
