Que tal ZAC, no tengo nuevo manuales aun, estoy hechandome un trence sabroso con pfsense+captive portal+freeradius2 ya que aun no se puede hacer que pfsense sea un hotspot tipo dolaradius, asi que esperamos pronto ver como arreglar esto y sera el siguiente tuto, la idea es no depender de software que pfsense no traiga ya sea integrado o de sus paquetes.

 Saludos!!!

   Cuidado como dice ptt, si lo hacen remotamente y su enlace es pppoe como los de telmex, van a perder a el equipo, tenemos 2 caldos, o lo parchan segun el post indicado por ptt o antes de agregan manualmente los dns de su ISP a la lista y como dice ptt:

Solo un detalle a tener en cuenta para quienes utilizan la opcion "Allow DNS server list to be overridden by DHCP/PPP on WAN" con PPPoE

Desactivar esta opcion si los agregan manualmente.

 Tuve que ir directamente a 2 localidades por este detalle, saludos!!!

  hahaha yea is danger, I had to drive to 2 locations for this issue after the upgrade from 2.0.1 to 2.0.2.
  Just add my ISP dns and done.
  Right now they back online, not a big issue just more miles to my car.
  Thanks!!!

 Please, if u have time guys make this test.
 Setup cp/fr2 start/stop option.
 HardTime empty in cp.
 Them add users and fr2 with any value > 5 minutes "Amount of Time".

 In my case, every user is kickoff after 5 minutes.
 
 

 In your case, u had setup a hotspot with pfsense:cp+dolaradius, this duo fix pfsense+fr2 issues?
 What db u are using with dolaradius?
 Thanks for your input.
 
 

 Once u setup users, users login, those have info, but if cat the file it show u a lot garbage that I cannot understand.

 I had been trying to figure out how to setup pfsense+cp+fr2 for a hotspot, I wanted to add users and each one with his own daily time for $$$.

 I wanted to use just pfsense, no external machine for this and no mysql support for now, small networks 5-10 users.

 I was running pfsense 2.0.1 no success, latter I upgrade to 2.0.2.

 I had follow the doc about pfsense+freeradius2 without success.

 I want to understand fr2 debug info but I need to read more about the protocol, working on...

 My resume is that, once u setup cp+fr2, u can add users and no matter what "Amount of Time" u give to each one, cp "HardTime" always win, doesn't matter if user is "Amount of Time" is < or > than cp HardTime.

 Them all my users will be kickoff based on cp value.

 Using interim-updates doesn't work because it let users login again and continue surfing, this is not what I want.

 Login based on ACL days restriction Wk12001300,Sa this works, great.

 Why I don't want to use Mysql? well this equipment is a fan less system and embedded devices , pfsense is install on a CF card, 512RAM, MySQL is a big app and I don't want to sacrifice CPU, I had read that MySQL is went u need support for +512 users, but for 5-10 not worth it, right?.

 But I will give a try.

 My question is:  does some here have been able to setup pfsense+cp+fr2 for hotstop with the default counter module or with mysql?

 Thanks!!!

Hi.

I had try to read the files using db_ tools but db-tools had not been able to read the files:

db41_dump185 db.daily
db_dump185: db.daily: Inappropriate file type or format

db41_dump db.daily
db_dump: db.daily: unexpected file type or format
db_dump: open: db.daily: Invalid argument

file db.daily
db.daily: data

 

This are really Berkeley files? Or I'm not using the tools right?

CP use text files no issue.

Thanks!!!

Hi.

Simple question, what type of file cp use to store his info?

captiveportal.db
captiveportal_radius.db

And the same thing but for freeradius?

db.daily
db.weekly

How can I read the info in my console?

Thanks!!!

    Atraves de que los estas controlando?
    conectados directo a tu switch, cp, etc?
    Del servicio que estas ofreciendo con ellos, que dicen los logs?

 I setup freeradius2 with CP and once I follow the instructions from MoSpock I receive the error:

Code:

Fatal error: Class 'Auth_RADIUS_' not found in /usr/local/captiveportal/radius_authentication.inc line 104

  U must be right, because port 8000 is open at my box.
  I will try your tip, thanks!!!

ipfw_context -l
Currently defined contextes and their members:
cp: vr0,

ipfw show
65291    0      0 allow pfsync from any to any
65292    0      0 allow carp from any to any
65301    0      0 allow ip from any to any layer2 mac-type 0x0806,0x8035
65302    0      0 allow ip from any to any layer2 mac-type 0x888e,0x88c7
65303 1734 858344 allow ip from any to any layer2
65307    0      0 deny ip from any to any layer2 not mac-type 0x0800,0x86dd
65310    0      0 allow ip from any to { 255.255.255.255 or 192.168.50.1 } in
65311    0      0 allow ip from { 255.255.255.255 or 192.168.50.1 } to any out
65312    0      0 allow icmp from { 255.255.255.255 or 192.168.50.1 } to any out                                                                                                                       icmptypes 0
65313    0      0 allow icmp from any to { 255.255.255.255 or 192.168.50.1 } in                                                                                                                       icmptypes 8
65314    0      0 allow ip from table(3) to any in
65315    0      0 allow ip from any to table(4) out
65316    0      0 pipe tablearg ip from table(5) to any in
65317    0      0 pipe tablearg ip from any to table(6) out
65318    0      0 allow ip from any to table(7) in
65319    0      0 allow ip from table( to any out
65320    0      0 pipe tablearg ip from any to table(9) in
65321    0      0 pipe tablearg ip from table(10) to any out
65322    0      0 pipe tablearg ip from table(1) to any in
65323    0      0 pipe tablearg ip from any to table(2) out
65531    0      0 fwd 127.0.0.1,8000 tcp from any to any in
65532    0      0 allow tcp from any to any out
65533    0      0 deny ip from any to any
65534    0      0 allow ip from any to any layer2
65535    0      0 allow ip from any to any

ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 00:11:0a:53:c9:10
        inet6 fe80::211:aff:fe53:c910%em0 prefixlen 64 scopeid 0x1
        inet WAN-IP netmask 0xffffff80 broadcast 255.255.255.255
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC>
        ether 00:11:0a:53:c9:11
        inet6 fe80::211:aff:fe53:c911%em1 prefixlen 64 scopeid 0x2
        inet 172.16.1.1 netmask 0xffffff00 broadcast 172.16.1.255
        nd6 options=1<PERFORMNUD>
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
vr0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=82808<VLAN_MTU,WOL_UCAST,WOL_MAGIC,LINKSTATE>
        ether 00:e0:c5:4e:36:60
        inet 192.168.50.1 netmask 0xffffff00 broadcast 192.168.50.255
        inet6 fe80::2e0:c5ff:fe4e:3660%vr0 prefixlen 64 scopeid 0x7
        inet6 fe80::1:1%vr0 prefixlen 64 scopeid 0x7
        nd6 options=1<PERFORMNUD>
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
plip0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> metric 0 mtu 1500
enc0: flags=0<> metric 0 mtu 1536
pfsync0: flags=0<> metric 0 mtu 1460
        syncpeer: 224.0.0.240 maxupd: 128 syncok: 1
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=3<RXCSUM,TXCSUM>
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0xb
        nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
pflog0: flags=100<PROMISC> metric 0 mtu 33200
ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536

cp settings, I have try local users and freeradius, using the same settings as 2.0.1.

The other commands doesn;t show info, thanks!!!

 I download:

built on Mon Dec 10 16:51:49 EST 2012

 Setup captive portal, local users, freeradius2 but looks like we still have the problem that cp is not working, anyone on that interface can navigate without any issue, is not even showing the login screen.

 I found this threads here from June with the same issue.

 Any news about?

A ti te funcionó? o solo lo dices porque supones que funcionaria, todo sabemos que es un FreeBSD.

   No me funciono por que no lo he intentado, yo no uso mi firewalls para otra cosa distintina a lo que fueron diseñadas para.

 Solo trate de apoyarte ya que no es un paquete que pfsense tenga disponible ya que aun no los requiere.

 Saludos!!!