• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Routing/Authentication solution needed

EyeMWing

Banned
I've spent nearly a week on this, trying various combinations of software and network configurations. Can't find a damn thing that will work.

I need to provide authenticated access through a router to ONLY authenticated users for ALL traffic, not just HTTP. And it needs to be free, and entirely contained within our own network (publicip.net fits the bill, but the authentication is against publicip's servers, you can't auth against your own stuff)

Authentication would ideally be against LDAP or ActiveDirectory, but I honestly have stopped caring about that - it can use it's own auth server for all I care.

Basically, what I'm looking for is something that will deny all outbound traffic unless the user first visits an internally hosted webpage and enters their username and password - which then authorizes the IP to communicate at-will with the outside world, until either the user logs out, or the connection has been idle for x amount of time.

The very, very important thing here is that it needs to be FREE.

In case I didn't do well enough, here's a brochure for a commercial product that does exactly what I need:
Text
 
EyeMWing, google for "captive portal"

If your switch supports 802.1x, that might be even better.
 
Originally posted by: cmetz
EyeMWing, google for "captive portal"

If your switch supports 802.1x, that might be even better.
Ahh, so there's a name for the technique. That makes life a hell of a lot easier.

m0n0wall will do it, eh? </thread>
 
Back
Top