The following lines were added (+) and removed (-):
A captive portal describes the webpage that asks for authentication, payment, and/or acceptance of terms of the agreement in order to access the Internet via a public provided WiFi hotspot you might find at coffee shops, airports, business centers, or hotel lobbies. You may simply be asked to accept their terms or you might be prompted for payment.A captive portal describes the webpage (''and backend facility'') that asks for authentication, payment, and/or acceptance of terms of the agreement in order to access the Internet via a public provided WiFi hotspot you might find at coffee shops, airports, business centers, or hotel lobbies. You may simply be asked to accept their terms or you might be prompted for payment.SQUID PROXY:Older network engineers might refer to a Captive Portal (a contemporary term) as something else, such as a Squid Proxy. This is because earlier examples were often created using Squid and Apache. Squid is a caching and forwarding HTTP web proxy. Squid Access Control Lists are one way to access to a network or Internet from a network.BASIC COMPONENTS:Components of a typical Captive Portal# access controller# radius server (only for user authentication installations)# radius client and framework (depending on radius)# backend database (only for user authentication, and/or possibly logging facility)# web server and possibly web application server or proxy server (Apache + Squid) When a client connects to an open WIFI network, an IP address is assigned and the web browser request is intercepted then redirected to the captive portal page. On linux iptable rules might be used to restrict access so that only a web client can access only the captive portal page no matter what host or IP it is attempting to contact.From there other components get involved, such as password authentication via radius or by a user simply agreeing to terms and conditions thus eliminating the need for radius and a user database.FIREWALL UTILITY CAPTIVE PORTAL:Options include using [[PFSense and OPNsense]]. Captive Portal in pfSense software forces users on an interface to authenticate before granting access to the Internet. Where possible, the firewall automatically presents a login web page in which the user must enter credentials such as a username/password, a voucher code, or a simple click-through agreement.[[Category:Security]]