Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Two-Factor Authentication

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      inews
      last edited by

      Hey,

      I want to setup pfsense community edition to NGO school behind the router/access points.
      so we want every student to have username and password to access the internet
      it will be open wifi network with front page asking for username and password, and only students who can access this.
      and if possible to make some usernames with different permissions to the network.

      Thank you

      1 Reply Last reply Reply Quote 0
      • ?
        Guest
        last edited by

        On a standard pfsense community version install you can turn on "captive portal" and do what you described. But it won't do two factor authentication. If you absolutely want two factor, then you can do the same with two factor on opnsense which is a pfsense forked independent project but quite similar in functionality and performance.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          If you want two factor auth, you can install the FreeRADIUS package and use it there (Google Authenticator or mOTP)

          @inews:

          it will be open wifi network […] if possible to make some usernames with different permissions to the network.

          That isn't possible with captive portal, but if your access points can do multiple SSIDs on different VLANs, you could setup a different SSID that has WPA2 Enterprise authentication, then it could put those special users on a different VLAN with different firewall rules/setup.

          You'd setup the second VLAN/Network on pfSense but getting users into that network is entirely up to your access points and switches, though, not pfSense

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.