Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Captive portal authentication setup for a specific subnet

    Captive Portal
    2
    2
    1851
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jttodorov last edited by

      Hello there,

      I have a pfsense installation on a PC in a university library with wireless and LAN workstation PCs for Internet and I want to use its WAN connection for adding additional wireless points in the same building. For authentication I want to use the captive portal setup, the problem is that the PCs in the library also need a password and the users that come to log to the internet get confused about that.
      How can I setup two different subnets for the captive portal - one for the library users and another for the additional wireless anthenas?
      Notice that the library PCs do not need authentication.

      The setup is the following:

      WAN 62.xx.xx.xx
      room subnet 172.xx.xx.xx
      addtional anthenas 192.xx.xx.xx
      172.xx.xx.xx uses WAN 62.xx.xx.xx without authentication
      192.xx.xx.xx anthena users need authentication for internet through 62.xx.xx.xx

      How can I get the two subnets (172.xx.xx.xx and 192.xx.xx.xx) working?
      I think that can be managed through the firewall rules for PPTP VPN.
      Thank you in advance.

      1 Reply Last reply Reply Quote 0
      • S
        ssbaksa last edited by

        @jttodorov:

        WAN 62.xx.xx.xx
        room subnet 172.xx.xx.xx
        addtional anthenas 192.xx.xx.xx
        172.xx.xx.xx uses WAN 62.xx.xx.xx without authentication
        192.xx.xx.xx anthena users need authentication for internet through 62.xx.xx.xx

        How can I get the two subnets (172.xx.xx.xx and 192.xx.xx.xx) working?
        I think that can be managed through the firewall rules for PPTP VPN.
        Thank you in advance.

        Hi,
        Tu use CP on more than one interface you must go to PFS2.0.
        If I have get you idea correctly you wish to connect AP's this which are connected on 62.x.x.x by using PPTP to inside net, then use CP to control traffic from them.
        It will be much better if you create VLAN's, then put those AP's together on same (or different VLAN's to distinguish between AP for students and those for stuff) VLAN. PFS will be then between WAN and VLAN's inside campus.
        Each VLAN can have then different set of rules (firewall) and you can choose in what way will CP work on them.

        I hope that this is good explanation.

        Br

        Sasa

        1 Reply Last reply Reply Quote 0
        • First post
          Last post

        Products

        • Platform Overview
        • TNSR
        • pfSense
        • Appliances

        Services

        • Training
        • Professional Services

        Support

        • Subscription Plans
        • Contact Support
        • Product Lifecycle
        • Documentation

        News

        • Media Coverage
        • Press
        • Events

        Resources

        • Blog
        • FAQ
        • Find a Partner
        • Resource Library
        • Security Information

        Company

        • About Us
        • Careers
        • Partners
        • Contact Us
        • Legal
        Our Mission

        We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

        Subscribe to our Newsletter

        Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

        © 2021 Rubicon Communications, LLC | Privacy Policy