Captive portal disconnect

shood

Hi ,
on the pfsense 2.4.4-P1 suddenly after 1 ,2 hour internet surfing the connection was interrupted .
when i try to call the captive portal page again, i get a blunk page with ("You are connected." Instead of the registration form). i see that I'm still logged in captive portal but i dont have internet access .
the problem still apear until i disconect the user from captive portal service on pfsense .

I have noticed that the captive portal url before the problem is
https://example.com:8003/index.php?zone=cpzone&redirurl=http%3A%2F%2Fwww.msftconnecttest.com%2Fredirect

when the problem appear the url changed to:8005 port
https://example.com:8005/index.php?zone=cpzone&redirurl=http%3A%2F%2Fwww.msftconnecttest.com%2Fredirect

Where's the problem !
and is there any way to logout from captive portal page from pc not from pfsense ?

Thanks in advance .

Gertjan

@shood said in Captive portal disconnect:

when i try to call the captive portal page again, i get a blunk page with ("You are connected." Instead of the registration form). i see that I'm still logged in captive portal but i dont have internet access .

What the GUI says is one thing.
Use https://www.netgate.com/docs/pfsense/captiveportal/captive-portal-troubleshooting.html and check the two <name>_auth_up and <name>_auth_down tables. The IP is listed in them ? If so, then you are really connected. If not, your locked out.

8005 port : If 8003 exists,, then 8005 is another captive portal instance == another network, etc

Logout page ; check out this thread, half an inch lower :

0_1548322336940_3354ab08-7415-49de-a47d-d8b000647531-image.png

You can activate the popup page .... if portal users accept popup pages (they actually never do).
This popup link will show you the correct logout URL.

shood

Thanks for reply
the problem is , After a relatively short time, the Internet connection breaks down and requires a new sign in on the plug-in page - but you get on the page, the response "you are already connected" !!!!!!
on the server and captiv portal log connected , but you dont have interner access untill restart the service captiveportal .

shood

its a bug !!!

see https://forum.netgate.com/topic/137824/pfsense-no-internet-when-it-is-said-you-are-connected

Gertjan

@shood said in Captive portal disconnect:

the problem is , After a relatively short time, the Internet connection breaks down and requires a new sign in on the plug-in page - but you get on the page, the response "you are already connected" !!!!!!

Again : check for yourself :

@gertjan said in Captive portal disconnect:

What the GUI says is one thing.
Use https://www.netgate.com/docs/pfsense/captiveportal/captive-portal-troubleshooting.html and check the two <name>_auth_up and <name>_auth_down tables. The IP is listed in them ? If so, then you are really connected. If not, your locked out.

Two solution : stop editing portal settings when users are connected - or throw them out manually (GUI) when you have to.
Or, as @shood proposes : https://forum.netgate.com/topic/137824/pfsense-no-internet-when-it-is-said-you-are-connected

shood

Update :

when enabled HA sync captive portal :
all users become after a peroid of time internet interrupting ,"you are already connected" ,..etc

change between 8003 and 8005
8003 captive portal page on slave
8005 captiv portal page on master

log file :
Jan 27 01:36:31 php-cgi rc.prunecaptiveportal: XMLRPC reload data success with https://xx.xx.x.xxx:443/xmlrpc.php (pfsense.exec_php).
Jan 27 01:39:32 php-cgi rc.prunecaptiveportal: Beginning XMLRPC sync data to https://xx.xx.x.xxx:443/xmlrpc.php.

when disabled HA sync captive portal :
fixed the problem ,but each change in Master (add vlan ,interface , firewall Rules ,change in captiveportal setting )
captive portal will deleted on the slave automatic and disconnect all users :
Jan 27 12:29:49 logportalauth 2581 Zone: cpzone - DISCONNECT: xxxx, xxxxxx, xxxxxxxxx .
Jan 27 12:29:53 check_reload_status Syncing firewall

problem appeared since the update from 2.4.4 to 2.4.4-p2 .

Gertjan

Normally, @free4 will drop in shortly to post
" https://forum.netgate.com/topic/139488/voucher-database-synchronization/2 "

edit : ah, you are already aware of this.