This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_captive_portal [2026/05/04 09:23] val [Captive Portal] |
сервис_captive_portal [2026/07/06 14:15] (current) val [pfSense] |
||
|---|---|---|---|
| Line 2: | Line 2: | ||
| ===== pfSense ===== | ===== pfSense ===== | ||
| + | |||
| + | * [[Администрирование pfSense]] | ||
| + | |||
| + | * [[https://opnsense.org/]] | ||
| * [[https://www.pfsense.org/]] | * [[https://www.pfsense.org/]] | ||
| + | * [[https://val.bmstu.ru/unix/img/My%20Documents/pfSense-CE-2.7.2.ova]] | ||
| + | |||
| + | |||
| * [[https://ftp.fagskolen.gjovik.no/pub/pfSense/]] | * [[https://ftp.fagskolen.gjovik.no/pub/pfSense/]] | ||
| * [[https://simplificandoredes.com/en/install-pfsense-on-virtualbox/]] | * [[https://simplificandoredes.com/en/install-pfsense-on-virtualbox/]] | ||
| - | <code> | ||
| - | По умолчанию, em0 WAN, em1 LAN | ||
| + | |||
| + | ==== Базовая настройка ==== | ||
| + | |||
| + | * По умолчанию, em0 WAN, em1 LAN | ||
| + | <code> | ||
| Username: admin | Username: admin | ||
| Password: pfsense | Password: pfsense | ||
| Default IP: 192.168.1.1 | Default IP: 192.168.1.1 | ||
| - | Через консоль назначаем LAN IP: 192.168.X.1/24 | + | Через консоль назначаем LAN IP: 192.168.X.1/24, dhpc потом в визарде |
| - | + | </code> | |
| - | Подключаемся через Web и отвечаем на вопросы Визарда: | + | |
| + | * Подключаемся через Web и отвечаем на вопросы Визарда: | ||
| + | <code> | ||
| Hostname: gate | Hostname: gate | ||
| Domain: corpX.un | Domain: corpX.un | ||
| Line 31: | Line 42: | ||
| Admin Password: Pa$$w0rd | Admin Password: Pa$$w0rd | ||
| + | |||
| + | Services/DNS Resolver/General Settings/Enable: false | ||
| </code> | </code> | ||
| Line 36: | Line 49: | ||
| <code> | <code> | ||
| - | Address Pool Range: 192.168.13.101 - 192.168.13.109 | + | Address Pool Range: 192.168.X.101 - 192.168.X.109 |
| - | DNS Servers: 192.168.13.10 | + | DNS Servers: 192.168.X.10 |
| </code> | </code> | ||
| - | ==== System Certificates Certificates ==== | + | ==== System/Certificates/Certificates ==== |
| * [[Пакет OpenSSL#Создание самоподписанного сертификата]] wild | * [[Пакет OpenSSL#Создание самоподписанного сертификата]] wild | ||
| - | ==== Captive Portal ==== | + | ==== System/Advanced/Admin Access ==== |
| + | |||
| + | * SSL/TLS Certificate: wild | ||
| + | |||
| + | ==== System/User Manager/Authentication Servers ==== | ||
| + | |||
| + | * [[Сервис FreeRADIUS]] | ||
| <code> | <code> | ||
| - | HTTPS server name: 192.168.1.1 | + | Descriptive name: radius server |
| - | Allow only users/groups with "Captive portal login" privilege set | + | Type: RADIUS |
| + | Hostname or IP address: server | ||
| + | Shared Secret: testing123 | ||
| + | RADIUS NAS IP Attribute: LAN... | ||
| </code> | </code> | ||
| + | |||
| + | ==== Services/Captive Portal ==== | ||
| + | |||
| + | <code> | ||
| + | Interfaces: LAN | ||
| + | |||
| + | Authentication Method: Authentication backend !!! По умолчанию | ||
| + | Authentication Server: radius server | ||
| + | NAS Identifier: gate | ||
| + | |||
| + | Enable HTTPS login: yes | ||
| + | HTTPS server name: gate.corpX.un | ||
| + | SSL/TLS Certificate: wild | ||
| + | |||
| + | Services/Captive Portal/corpX/Allowed IP Addresses | ||
| + | 192.168.X.10 | ||
| + | </code> | ||
| + | |||
| + | ==== Status/System Logs/System/General ==== | ||
| + | |||
| + | * Просмотр журналов (Time - порядок сортировки или Filter по слову moved) | ||
| ===== Самописный вариант ===== | ===== Самописный вариант ===== | ||