Captive Portal doesn't work with > 120 VLAN interfaces
Captive portal is not authenticating users (just letting everyone on) when a zone is attached to more than 120 VLAN interfaces. I need to run captive portal on over 1000 VLANS.
Fixes #4150. Move to tables to accomodate unlimited number of interfaces.
Fix the captive portal rules after 98bf4991dc31f97fc7315a6b8aba433de9d39cea.
The malformed rules breaks the parsing of initialisation rules.
#3 Updated by Ethan Hayon over 6 years ago
Thanks guys. So it looks like the exact number is 117 VLANS, but when I add any more, the captive portal starts letting everyone through. You're right, this is most likely not a 2.2 specific issue. What other information can I provide to help debug the issue?
uname -a output:
FreeBSD t31.localdomain 10.1-RELEASE-p3 FreeBSD 10.1-RELEASE-p3 #0 8bdb2f8(releng/10.1)-dirty: Fri Dec 26 09:41:29 CST 2014 root@pfsense-22-amd64-builder:/usr/obj.amd64/usr/pfSensesrc/src/sys/pfSense_SMP.10 amd64
I've attached the config file, it's a bit long with all the VLAN config. The system contains 255 vlans right, now, 117 of which are attached to CP zone 2. Which log files would be helpful for you?
#4 Updated by Ethan Hayon over 6 years ago
Ok, I did a little digging and I found out what's happening. IPFW isn't inserting all of the necessary CP rules because the rule is too long.
See attached image. Would you recommend I break the rule up into multiple smaller rules?