[SOLVED] Network access redirect page

[thebrokebach]

I want to create a landing page for people when they try to connect to my wireless network. Similar to a hotel redirect, but a simple webpage redirect. What would be the best way to do this?

 

[bill001g]

This is not a simple function to do. There are a couple ways to accomplish this but you need a server of some kind. This function is generically called a captive portal.

This tends to be very hard unless you want to display a simple disclaimer on a home router. There just is not enough memory or processing power on most routers.

Still the router must have the ability to redirect the traffic to a server which then does the authorization and tell the router to allow the traffic. This is not a common feature in factory software but some third party images have the ability.

Since you need a server anyway using pfsense to act as the router would likely be the simplest.

Now this does not actually protect the wifi itself. They can still connect via the wifi and access other machines on the internal lan they just can not go to the internet. You would need a much more complex design to prevent wifi access.

In general the best solution to wifi access is to run in enterprise mode. This gives each user their own unique userid and password. You still need a server to do the radius function that makes all this work. This does not solve how the user get the userid and password to begin with.

This is not a simple problem and why hotel pay quite a big of money for the systems they use. You can hack together free tools to do it but you have to have a fairly strong understanding to do it well.

 

[thebrokebach]

Definitely more of a simple disclaimer on a home router. Nothing too fancy I just need to display a sentence. I hope this is a little clearer on what I am needing.

This is not a simple function to do. There are a couple ways to accomplish this but you need a server of some kind. This function is generically called a captive portal.

This tends to be very hard unless you want to display a simple disclaimer on a home router. There just is not enough memory or processing power on most routers.

Still the router must have the ability to redirect the traffic to a server which then does the authorization and tell the router to allow the traffic. This is not a common feature in factory software but some third party images have the ability.

Since you need a server anyway using pfsense to act as the router would likely be the simplest.

Now this does not actually protect the wifi itself. They can still connect via the wifi and access other machines on the internal lan they just can not go to the internet. You would need a much more complex design to prevent wifi access.

In general the best solution to wifi access is to run in enterprise mode. This gives each user their own unique userid and password. You still need a server to do the radius function that makes all this work. This does not solve how the user get the userid and password to begin with.

This is not a simple problem and why hotel pay quite a big of money for the systems they use. You can hack together free tools to do it but you have to have a fairly strong understanding to do it well.

 

[jsmithepa]

Well starbucks do it every day, so am guessing one of them business-class router will have it. Ubiquiti?