We have stopped working on Pfsense and won't be working on it anymore. We now recommend Cobot customers to get a Netbox.
This is a system patch for the Pfsense router software that adds support for Cobot to the captive portal feature of Pfsense.
With this patch installed the captive portal will authenticate directly against the Cobot API, allowing users to log in using their Cobot account credentials.
Note that this disables support for Radius/local captive portal authentication.
Currently this package supports version 2.0.1, 2.0.3, 2.1.0 and 2.1.3 of Pfsense.
Install the "System Patches" package on pfsense on your router:
On the Pfsense web interface go to System => Packages...
..and go to Available Packages.
Scroll down to System Patches and click the Add button on the right.
Go to the System => Patches page...
... and click on the Add Patch button.
Enter "Cobot" in the description field and:
- for Pfsense 2.0.1 enter "https://github.com/cobot/cobot_captive_portal/commit/919c69b028109d2a6b208dbe8b102c8fd9c6b752" in the "URL/Commit ID" field.
- for Pfsense 2.0.3 enter "https://github.com/cobot/cobot_captive_portal/commit/55cdde908fb1d839551a180455ddd0dfe85e7ff1" in the "URL/Commit ID" field.
- for Pfsense 2.1.0 enter "https://github.com/cobot/cobot_captive_portal/commit/0b06835494b93cf666e5d9548927f1d7139b5ee5" in the "URL/Commit ID" field.
- for Pfsense 2.1.3 enter "https://github.com/cobot/cobot_captive_portal/commit/8aca314892a0a422bcf4d21a12d463c7a7478834" in the "URL/Commit ID" field.
Click the Save button.
Click Fetch and then Apply on the patch.
Go to the Services, Captive Portal.
Only on Pfsense 2.1.0 and later: create a captive portal zone with any name (for example 'cobot').
Check Enable captive portal, select the interface you want to protect (in most cases LAN), enter the subdomain (http://subdomain.cobot.me) of your space under Space subdomain and your access token (you can get this token on Cobot under Setup => Wifi integration).
Important: If you are planning to use day-long passes set the soft timeout to 8 hours and the hard timeout to 24h. If you are planning to use time pass shorter than 1 day set both timeouts to the duration of the time pass, e.g. if you offer 4h passes set the hard timeout to 4 hours.
Press "Save" and you are done.
In order to allow your members to access Cobot without logging in to the captive portal (for example for buying time passes after they have run out) you have to whitelist Cobot.
Go to the captive portal page and click on the Allowed Hostnames tab.
Create a new entry where you select To from the Direction drop-down and enter <your-subdomain>.cobot.me for the Hostname.
