Project

General

Profile

Actions

Feature #2599

closed

Captive Portal autologin function better than MAC passthrough

Added by Erik Ruedin over 11 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Captive Portal
Target version:
-
Start date:
08/16/2012
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

We use pfsense in an apartment hotel to organize the network. As portal server we use Antamedia at the moment. We want to replace it by the captive portal function of pfense what is in principle possible, but users request an autologin function supporting multiple devices.

The current "Pass-through MAC" function isn't usable for this because
  • in pfsense is no log when authentificated computer logs in neither in "system -> portal auth" nor "status -> captive portal"
  • A MAC id in passthrough list ist linked to a user. If user will be deleted the linked mac id should be deleted also
  • MAC authentificated aren't in any accounting list because it doesn't replace the MAC id to a user/pw towards a radius server.

An autologin function could be realized in two possible ways:
Option 1: (like in Mikrotik)
Write a cook ie while login. When reentering the captive portal the cookie is checked and if valid it logs the user in. Each user can have multiple cookies for several devices.
Disadvantage: user must always open the browser

Option 2: (like in Antamedia)
Store a list of Mac Ids per user during first login with a new device. When connecting next time read the mac id of the unauthentificated device. If found in the mac id list use the linked user with same handling as he would have entered user/pw. There user mangager (or radius server), logs and dashboard work as usual.
Advantage: works with other software then browser (eg. Skype, FTP etc.)
Disadv.: more complex then the cookie option

Thank you for thinking about this feature.

Actions #1

Updated by Chris Buechler over 11 years ago

  • Status changed from New to Needs Patch
Actions #2

Updated by Michael F over 9 years ago

Any updates or work around!?
We also need this option... We use login by MAC address...but it's waiting the client to open the browser & go to any website to login to CP. (we need this to be done automatically)

Actions #3

Updated by A FL over 5 years ago

Multiple things here :

A Pass-Trough MAC address is a MAC address that will bypass the captiveportal. Therefore no logs are generated when this MAC connect to pfSense, because this MAC bypass the captiveportal. It's precisely the point of the Pass-Trough feature.

users request an autologin function supporting multiple devices

This feature request is a duplicate of #6956
When it will be implemented, pfSense will work basically in the way you describe in option 2.

We use login by MAC address...but it's waiting the client to open the browser & go to any website to login to CP. (we need this to be done automatically)

Have a look to #2963 for this. But if you want users to get automatially connected, are you sure you are seeking for a captiveportal here?

I advice you to have a closer look to Snort Package, according to what you are saying you want to setup an IDS and not a captiveportal

This issue can be closed.

Actions #4

Updated by Jim Pingle over 5 years ago

  • Status changed from Needs Patch to Closed
Actions

Also available in: Atom PDF