Feature #2599
closedCaptive Portal autologin function better than MAC passthrough
0%
Description
We use pfsense in an apartment hotel to organize the network. As portal server we use Antamedia at the moment. We want to replace it by the captive portal function of pfense what is in principle possible, but users request an autologin function supporting multiple devices.
The current "Pass-through MAC" function isn't usable for this because- in pfsense is no log when authentificated computer logs in neither in "system -> portal auth" nor "status -> captive portal"
- A MAC id in passthrough list ist linked to a user. If user will be deleted the linked mac id should be deleted also
- MAC authentificated aren't in any accounting list because it doesn't replace the MAC id to a user/pw towards a radius server.
An autologin function could be realized in two possible ways:
Option 1: (like in Mikrotik)
Write a cook ie while login. When reentering the captive portal the cookie is checked and if valid it logs the user in. Each user can have multiple cookies for several devices.
Disadvantage: user must always open the browser
Option 2: (like in Antamedia)
Store a list of Mac Ids per user during first login with a new device. When connecting next time read the mac id of the unauthentificated device. If found in the mac id list use the linked user with same handling as he would have entered user/pw. There user mangager (or radius server), logs and dashboard work as usual.
Advantage: works with other software then browser (eg. Skype, FTP etc.)
Disadv.: more complex then the cookie option
Thank you for thinking about this feature.
Updated by Chris Buechler almost 12 years ago
- Status changed from New to Needs Patch
Updated by Michael F almost 10 years ago
Any updates or work around!?
We also need this option... We use login by MAC address...but it's waiting the client to open the browser & go to any website to login to CP. (we need this to be done automatically)
Updated by A FL over 6 years ago
Multiple things here :
A Pass-Trough MAC address is a MAC address that will bypass the captiveportal. Therefore no logs are generated when this MAC connect to pfSense, because this MAC bypass the captiveportal. It's precisely the point of the Pass-Trough feature.
users request an autologin function supporting multiple devices
This feature request is a duplicate of #6956
When it will be implemented, pfSense will work basically in the way you describe in option 2.
We use login by MAC address...but it's waiting the client to open the browser & go to any website to login to CP. (we need this to be done automatically)
Have a look to #2963 for this. But if you want users to get automatially connected, are you sure you are seeking for a captiveportal here?
I advice you to have a closer look to Snort Package, according to what you are saying you want to setup an IDS and not a captiveportal
This issue can be closed.
Updated by Jim Pingle over 6 years ago
- Status changed from Needs Patch to Closed