[SOLVED] Captive Portal

[liorz]

Hi
I just upgrade for the 16.1 and I really dont understand how to create the captive portal
Please help me , or guide me how to start?

Thanks , Lior.

[AdSchellevis]

More documentation is on the way, but I can help you with the basics first.

1) create a new zone by pressing the (+) in the right corner
2) Choose an interface on which CP should run and an authentication method + description for the zone
3) "save changes"
4) press apply and your basic zone should be functional

If you want to use vouchers, go to System -> Access -> Servers and create a new voucher provider, you can use this provider as authentication method in the zone.

[liorz]

exactly what I've done
but still nothing happen
how I can monitor that or what can cause this problem?

Thanks

[AdSchellevis]

Not sure what your issue is, maybe you could share some more details like the interface where you enabled the captive portal on and what your network looks like.

Normally you just enable your zone on lan or an opt interface and press apply, if you want to debug the rules it creates behind the scenes you can open a shell and run "ipfw show"

[liorz]

Ok
so when i try to enter to google.com it dosent redirect to captive portal
but when I try to enter 8.8.8.8 its redirect to the captive portal and then I try to login to google.com
and it work..
so I think there is DNS issue before the login to the captive portal or redirect issue
something strange here.

[AdSchellevis]

google.com uses https, which probably isn't redirected with your configuration, you can setup a certificate in your zone to catch https traffic.
If you want to check if dns is working correctly first, try to go to a website which doesn't use https and see if it redirects to the login page.

[liorz]

I tried with http website
same issue

[AdSchellevis]

did you configure a forwarder?
Where does your client sends its dns requests to?

[liorz]

I tried with DNS forwarder , same issue
I configured now without DNS forwarder and configured static dns 8.8.8.8 ,8.8.4.4

[AdSchellevis]

Can you describe your setup?

[liorz]

http://postimg.org/image/iti0t34uf
http://postimg.org/image/5im4qoxcr

[AdSchellevis]

That's not really a description of your network setup 
What does your connection look like (direct attached networks, vlans, etc), ip ranges basic firewall rules, what ip address does your client receive, what kind of features of OPNsense are you using, does all function correctly if CP is disabled. etc. etc..

[liorz]

OK I solved the issue by configure on all interfaces the DNS forwarder
now I want to create voucher .. the vouchers are so complicated
there is an option to configured it with numbers only ? (like the old OPNsense captive portal,  it was option to configured the key )


Thanks , Lior.

[AdSchellevis]

No, you can only generate passwords in the current format.
The configurable key option is not something we're considering, maybe we might add an option to choose "unsafe password" with limited character set later on...