Knowledge Base

What is pfSense?

pfSense is an open-source firewall and router software built on the FreeBSD kernel, offering advanced features. It provides a comprehensive solution for both individual users and medium to large-scale enterprises with advanced network management requirements. pfSense combines firewall, VPN, traffic management (QoS), load balancing, IDS/IPS (intrusion detection and prevention systems), and many more critical network management capabilities on a single integrated platform. This flexibility allows organizations to make customizations specific to their network structures.

What is Captive Portal?

Captive Portal offers an entry system that requires users to authenticate or accept certain rules before accessing a network. This technology is widely used for user management and security purposes, especially in environments such as hotels, airports, restaurants, and public Wi-Fi networks. With a Captive Portal solution, user access can be restricted, terms of use can be enforced, or paid access systems can be established.

pfSense Captive Portal Installation and Configuration

Requirements:

• A physical or virtual server with a minimum of 2-core CPU, 2 GB RAM, and 20 GB storage space

• Downloaded pfSense ISO file

• IP configuration information for WAN and LAN

• Internet connection

pfSense Installation Steps:

1. Preparing the Installation Environment:

   • Download the latest ISO file from the pfSense Official Site.

   • Create a USB or virtual CD.

2. Basic Installation:

   • Boot from the ISO environment and select the "Install" option.

   • "Auto (UFS)" or "ZFS" can be preferred for data integrity in disk configuration.

3. Configuring Network Interfaces:

   • Assign WAN and LAN ports.

   • DHCP or static IP for WAN, and private IP configuration for LAN are performed.

Captive Portal Installation:

1. Create a New Captive Portal Zone:

   • Go to "Services > Captive Portal" tab and define a new zone.

   • Select the LAN interface and name the zone.

2. Selecting the Authentication Method:

   • Options: "No Authentication", "Local User Manager", "RADIUS" or "Voucher" system.

3. Login Page Customization:

   • If you wish, you can create a welcome screen suitable for your brand using HTML/CSS.

4. Quota and Time Limits:

   • You can set download and upload speed limits, and limit the session duration.

5. Activation and Testing Process:

   • Save the settings and activate the Captive Portal.

   • The system is verified by testing the connection with devices.

Technical Details to Consider:

• Correct DNS configuration is critical for the proper functioning of the Captive Portal.

• HTTPS usage is important for protecting user data.

• You can create special networks for different user groups with VLAN support.

Frequently Asked Questions (FAQ)

1. Is pfSense Captive Portal completely free? Yes, pfSense and its Captive Portal feature are open source and free.

2. How is user session history kept? All connection records can be monitored in detail via the "Captive Portal Logs" screen.

3. On which virtualization platforms can pfSense be installed? It works stably in a wide variety of virtualization environments such as KVM, VMware ESXi, Hyper-V, and VirtualBox.

4. How are user quotas managed? Users can be restricted through parameters such as bandwidth and connection time.

5. Is the use of a RADIUS server mandatory? No, local user management is sufficient for small-scale uses, but RADIUS integration is recommended for large organizations.

Post-Use Recommendations:

• Detect anomalies by performing regular log analysis.

• Create special security rules for Captive Portal on the firewall.

• Consider plugins such as pfBlockerNG and Snort for extra security.

Related Hosting Options:

• Quick start for individual projects with Shared Hosting.

• Private server control with VPS Options.

• Low-latency European servers with Hetzner Cloud VPS.

Detailed Guides and Extra Resources:

• What is pfSense and Captive Portal? Installation and Usage Guide

Conclusion: Thanks to pfSense Captive Portal integration, you can increase network security, manage user access, and control your access policies from a central location. With its free structure, rich feature set, and scalable architecture, pfSense appeals to a wide range of users, from small businesses to large corporate structures. You can maximize your network performance and security with correct configuration and regular maintenance.