Skip to main content

OPNsense

This guide explains how to configure OPNsense open-source firewall captive portal to work with IronWifi for RADIUS-based user authentication and WiFi access control.

Prerequisites​

In IronWifi Console (complete these first):​

  1. Create a Network in IronWifi Console
  2. Create a Captive Portal with the appropriate vendor
  3. Note your RADIUS settings and Splash Page URL

In OPNsense:​

  • Administrative access to OPNsense device
  • Network connectivity to IronWifi RADIUS servers

Device Configuration​

RADIUS Settings​

Configure your device with:

SettingValue
Primary Server{Primary IP from IronWifi}
Auth Port1812
Acct Port1813
Shared Secret{Your shared secret}

Captive Portal​

  1. Enable external captive portal
  2. Set splash page URL from IronWifi
  3. Configure walled garden to include 107.178.250.42

Walled Garden​

Add these entries for pre-authentication access:

Required for IronWifi:

  • 107.178.250.42 (IronWifi splash page)
  • DNS servers

Authentication Provider Domains:

If using social login providers, add the following domains to your walled garden:

ProviderRequired Entries
Google*.google.com, *.googleapis.com, *.gstatic.com, accounts.google.com
Facebook*.facebook.com, *.fbcdn.net, connect.facebook.net, facebook.com
Twitter*.twitter.com, *.twimg.com, twitter.com
LinkedIn*.linkedin.com, *.licdn.com
Microsoft*.microsoft.com, *.microsoftonline.com, *.live.com, login.live.com

WPA-Enterprise​

For 802.1X authentication:

  1. Set security to WPA2-Enterprise
  2. Configure RADIUS server details
  3. Test with a known user

Troubleshooting​

IssuePossible CauseSolution
Portal not appearingWalled garden misconfiguredCheck walled garden includes 107.178.250.42 and splash URL is correct
Authentication failingRADIUS settings incorrectVerify RADIUS IP, ports, and shared secret match IronWifi Console
No internet after authFirewall or VLAN issueCheck firewall rules and VLAN settings

Getting Help​

For device-specific questions: