Import from a list (MAC addresses) possible

FGlaser

Hey,

i have the task, to import a list of 200+ MAC addresses into the pfSense.
These clients should not need to authenticate at the CP, so i need an exception.

In the Alias section there is only the possibility to add IPs, Ports, Ranges, Networks...
But those clients get via DHCP different IPs... - it is a free WiFi for guests.

So the questions are:

Is there a opportunity to import the list of MAC addresses?
How can i create an Alias for these clients for the easy administration?
How can i create an exeption from CP for those clients?

If there are more information needed please ask for it.

Thanks in advance
Frank

Gertjan

@fglaser said in Import from a list (MAC addresses) possible:

These clients should not need to authenticate at the CP, so i need an exception.

Add them here :

johnpoz

@fglaser as @Gertjan pointed out you can add them there. Once you add one, you could export the config.. Manually edit it to add all your macs, and then restore. So you don't have to do 1 by 1..

see in the captive portal part of the xml, that you can download

<captiveportal>
	<testauth>
		<zone>testauth</zone>
		<descr></descr>
		<localauth_priv></localauth_priv>
		<passthrumac>
			<action>pass</action>
			<mac>aa:bb:cc:00:01:01</mac>
			<descr></descr>
		</passthrumac>
		<passthrumac>
			<action>pass</action>
			<mac>aa:bb:cc:00:01:03</mac>
			<descr></descr>
		</passthrumac>
	</testauth>
</captiveportal>

FGlaser

@johnpoz
VERY good idea - many thanks !

johnpoz

@fglaser sure there is a way you could create a script or something to create the xml for you with your list of macs and then restore the cp section of the xml.

heper

@johnpoz @FGlaser

remember that a lot of mobile devices have mac-randomization enabled by default...
so after every firmware update they typically change their address.

johnpoz

@heper said in Import from a list (MAC addresses) possible:

have mac-randomization enabled by default...

yup that could be problematic for sure ;)