Captive Portal need to auth again and again.



  • I have a Pfsense box setup with a simple captive portal that has a terms and conditions page, an accept button and a redirect URL.  No vouchers are being used.

    some mobile user(iphone and android) report when they reconnect the Wi-Fi again, that terms and conditions page show up again, they need to pass accept again to go though internet. but I saw user IP, MAC in logged in user list.

    my setting of CP :

    Idle time 720 minutes
    No Authentication
    A custom Portal Page

    Pfsense Version : 2.3.4

    that's all ~ I don't know why they need to authentication again. but just some device got this happen, even iOS 10, 11  and Android 6 , 7 also got this problem.

    dos anyone have this happen before ?

    Thanks



  • Hi,

    Need some more info :
    When these devices need to reconnect, the same MAC is being used (of course), but … is their still IP the same ?
    You said :

    they reconnect the Wi-Fi again

    Same AP, another one ? Received the same IP ?

    IF MAC & IP are the same they can not hit the portal login page, because ipfw firewall rules are letting through the connection.
    So, next question :
    Use this https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting and check the tables to see if MAC and IP are there - they should be there, except if hard or soft time out event removes them.



  • @Gertjan:

    Hi,

    Need some more info :
    When these devices need to reconnect, the same MAC is being used (of course), but … is their still IP the same ?
    You said :

    they reconnect the Wi-Fi again

    Same AP, another one ? Received the same IP ?

    IF MAC & IP are the same they can not hit the portal login page, because ipfw firewall rules are letting through the connection.
    So, next question :
    Use this https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting and check the tables to see if MAC and IP are there - they should be there, except if hard or soft time out event removes them.

    Yes ~ They got the same IP using the same MAC.



  • What about this one :
    @Gertjan:

    …...
    IF MAC & IP are the same they can not hit the portal login page, because ipfw firewall rules are letting through the connection.
    So, next question :
    Use this https://doc.pfsense.org/index.php/Captive_Portal_Troubleshooting and check the tables to see if MAC and IP are there - they should be there, except if hard or soft time out event removes them.

    ?


Log in to reply