What's the easiest way to set BANDWIDTH allocation / user?

MojoTojo · Jan 28, 2011, 3:58 AM

Hi guys

I just basically need all users w/ a Captive Portal password from PFsense internal user management, to have unrestricted bandwidth.. and 1 guest account w/ restricted bandwidth.. I know this can be done w/ RADIUS, but isnt there an easier less complicated way? doesnt PFSense have internal bandwidth settings / user? im on 1.2.8 by the way..

danesco · Jan 29, 2011, 1:30 AM

in pfsense2 i do it creating an alias for limited host, a limiter for in and out, and a rule with advance settings with these limiters. Works good, at least for me.

MojoTojo · Jan 29, 2011, 5:45 PM

@danesco:

in pfsense2 i do it creating an alias for limited host, a limiter for in and out, and a rule with advance settings with these limiters. Works good, at least for me.

umm, hehe i really tried to understand and mimic that what you have said, i cant' seem to get it.. would you kindly explain further or in a bit more detail? just a little more and i'll probably get it hehe

danesco · Feb 1, 2011, 1:33 PM

hehe no problem ;D

1- Go to firewall->aliases and create an alias for host (or the entire network if u want that way)
2- Then go to firewall->traffic shaper->limiter tab and create two new limiters, one for upload and another for download limit, check enable limiter and its children.
3- At last go to firewall->rules->lan tab and create a rule using for "source" the alias that u create in the 1st step, in "advance features" "In/Out" use the limiters that u create in step 2.

Now go to a test machine and try it :)

MojoTojo · Feb 3, 2011, 1:06 AM

@danesco:

hehe no problem ;D

1- Go to firewall->aliases and create an alias for host (or the entire network if u want that way)
2- Then go to firewall->traffic shaper->limiter tab and create two new limiters, one for upload and another for download limit, check enable limiter and its children.
3- At last go to firewall->rules->lan tab and create a rule using for "source" the alias that u create in the 1st step, in "advance features" "In/Out" use the limiters that u create in step 2.

Now go to a test machine and try it :)

ohhhhh… so it's basic traffic shapping. this i can easily figure out but question is how do you somehow make that work w/ CAPTIVE PORTAL ? <-- my main issue...

only ways i can think of w/c i dont think is possible area:

if i can assign bandwidth limits to each CAPTIVE PORTAL user account...
if i can have CAPTIVE PORTAL assign specific IPs to specific user account, (and ofcourse have limits already set for each IP)

hmmm..

danesco · Feb 3, 2011, 5:21 PM

Well, sorry that whas my way when i see that is not possible at least from the gui :(

in the Enable per-user bandwidth restriction "RADIUS can override the default settings."
But with the package freeradius there is not a easy-gui option :( but maybe reading the docs we can get something. Tonight if i have time i will mount a virtual pf to destroy it hehe.

cylent · Feb 8, 2011, 5:51 PM

wow this is great and is a much needed feature captive portal cannot do without
however – doing this for like 100 or so users is very tedious. >:(