Site Tools


Captive Portal

The Captive Portal module is called NoCatSplash. Older versions were named NoCatAuth.
Captive Portal presents users with a simple webpage, prompting them to agree to certain terms before they are allowed to access the network. If the user clisk on “OK, I agree”, the gateway daemon then changes the firewall rules on the gateway to pass traffic for that client (based on IP address and MAC address).

This prevents users from accessing the Internet automatically without agreeing to certain terms of usage.

Captive Portal is ideal for public/semi-public networks to remind end users of the legal responsibilities linked to Internet usage. The requirements are simple and can also be useful in situations where you simply want to give people an idea whose network they are using.
(Default: Disabled).

Enable function: Checking this and clicking Save will make Tomato users see a Welcome banner when they try to access the Internet.

Interface: Selects one of the bridges on which Captive Portal will listen for connections.

Gateway Name: The name of the gateway that will appear in the Welcome banner.

Captive Site Forwarding: When active, the 'homepage' (see definition below) will appear after you Agree to the terms in the Welcome Banner.

Home page: The URL that will appear after you Agree to the Welcome Banner.

Welcome html Path: The location of the Welcome banner html page.

Logged Timeout: The time period (in seconds) during which no Welcome banner will appear when you access the device. (Default: 3600s = 1 hour).

Idle Timeout: The time period, (seconds) before the network client sees the splash screen again, reads usage terms, and clicks 'I Agree' to get regain network access.

Max Missed ARP: The number of times a client can be missing from the ARP cache before the connection is closed. (Default: 5).

Log Info Level: How much detail will be included in log messages from this module. Level 0=Silent, 10=Verbose. (Default: 2).

Gateway Port: Port to be used by the Captive Portal for page redirection. (Ports 1 to 65534). (Default: 5280).

Excluded/Included ports to be redirected: Here, enter the port numbers you wish to be:
Included (which the client is allowed to use after login) or;
Excluded (which client is not allowed to use after login and Tomato redirects away from the network client).
Leave blank spaces between port numbers when configuring them. For example: “25 110 4662 4672”.

Using both Included and Excluded ports at the same time is not recommended. This can cause conflicts about which ports are allowed or not.

URL excluded off the portal: URLs/sites that can be accessed without the Welcome banner screen appearing. When entering allowed URLs,
leave spaces between URLs. For example:

MAC address whitelist: MAC addresses that will be excluded from the Portal functions. Leave spaces between MAC Addresses.
For example: 11:22:33:44:55:66 11:22:33:44:55:67

Customized Splash File Path: Here you can upload your personal Welcome banner that will overwrite the default one.

Note: If Login Time expires you must return to the splash page to regain network access.

After you click on “I Agree” nothing indicates when your usage period will expire,
so you may lose Internet Access without warning.

captive_portal.txt · Last modified: 2020/12/26 02:42 by hogwild