Question regarding network design

alltime

–---
With the following set-up diagram, are we able to set-up the captive portal to connect to our Domain Controllers through RADIUS for authentication?

We have not tried the portal but currently we are able to ping the gateway from our PFSense box but unable to ping PFSense from any LAN computers or access the Internet from behind PFSense. DHCP relay and DHCP server are currently turned off on PFSense.

PFSENSE WAN: 192.168.1.6
PFSENSE WAN GATEWAY: 192.168.1.1
PFSENSE LAN: 192.168.2.1
Subnet WAN: 255.255.255.0

chpalmer

Your "drawing" and your last description dont agree… Is your lan 192.168.2.0/24?

alltime

My apologies, the LAN is set-up at 192.168.1.7/24

alltime

Also although configured in front of the Domain Controllers, which act as DHCP and DNS, PFSense is configured with Domain Controllers as DNS.

wallabybob

Your diagram shows 2 LANs. Are these the same LAN or different LANs?

If different, which LAN are you talking about when you say "unable to ping PFSense from any LAN computers"?

Apparently you have both the LAN and WAN pfSense interfaces on the same IP subnet (192.168.1.0/24). This is an invalid configuration.

I presume you are trying to test something (captive portal?). If you describe what you want to do I would be happy to make suggestions.

@alltime:

With the following set-up diagram, are we able to set-up the captive portal to connect to our Domain Controllers through RADIUS for authentication?

I have been using captive portal but not with an external RADIUS server. I don't see any reason why something like the configuration you have drawn would not work provided you put together a valid configuration.

alltime

I was able to figure out the issue. The problem was that I PFSense supplying DHCP addresses to the domain controllers. This seemed to cause the issue.

The solution was:

Changed gateway IP to 192.168.3.1
PFSense WAN - 192.168.3.2
PFSense LAN - 192.168.1.1

Our LAN computers that previously connected to the gateway address of 192.168.1.1 now connect to PFSense using that address. This allowed us to connect to the internet and throughout our network.

Thank you Wallabybob

Question regarding network design

–--- With the following set-up diagram, are we able to set-up the captive portal to connect to our Domain Controllers through RADIUS for authentication?

We have not tried the portal but currently we are able to ping the gateway from our PFSense box but unable to ping PFSense from any LAN computers or access the Internet from behind PFSense. DHCP relay and DHCP server are currently turned off on PFSense.

–---
With the following set-up diagram, are we able to set-up the captive portal to connect to our Domain Controllers through RADIUS for authentication?