Captive Portal

Zentyal implements a Captive Portal service, which allows you to limit the access to the network from the internal interfaces .

Configuring a captive portal with Zentyal

Through the Captive Portal menu you can access the Zentyal’s captive portal configuration.

_images/main.png

Captive portal configuration

Group

If you define a group, only users belonging to it will be allowed to access through the captive portal. By default access is allowed to all registered users.

HTTP port and HTTPS port

You can find the web redirection service under HTTP port, and the registration portal in HTTPS port. Zentyal will automatically redirect the web requests to the registration portal, located in https://ip_address:https_port/

Captive interfaces

Here you can find a list of all the internal network interfaces. The captive portal will limit the access to the interfaces that are checked in this list.

You can also see a form that allows you to limit the bandwidth to a given amount over a given time interval. To use this option, you have to have the module Bandwidth Monitor installed and enabled. If you have enabled a limit, after enabling the captive limit over one of the interfaces, the Bandwidth Monitor will also be enabled over the same interface. You can see the configuration and reports going to Network ‣ Bandwidth Monitor.

Exceptions

You can set up exceptions to the captive portal, so that certain Objects or Services will be able to access the external network without having to pass through the log-in forms.

_images/exceptions.png

Exceptions to the captive portal

List of Users

The Current users tab contains a list of the users which are currently registered in the captive portal.

_images/userslist.png

Current users

The following information for each user is available:

User

Name of the registered user.

IP address

IP address of the user

Bandwidth use (Optional)

If the Bandwidth Monitor module is enabled, this field will show the bandwidth use (in MB) of the user for the configured period.

From this list it is also possible to “kick” the users or “Extend Bandwidth Quota” their credit. Kicking the user will instantly close the user’s session, leaving him without Internet access. Extending the quota will add the default quota to his/her current credit.

Using the captive portal

When a user, connected to Zentyal through a captive interface, tries to access any web page using his/her browser, he/she will be automatically redirected to the Captive Portal, asking for authentication.

_images/login.png

Captive Portal authentication webpage

After a successful login, a pop-up window will be shown to the user. This window keeps the user session open, so it should be kept open until the user disconnects from the Captive Portal.

Tip

Most browsers will automatically block the pop-up, you have to always allow pop-ups from Zentyal.

_images/popup.png

Session window