1. Navigate to Services | Captive Portal.
2. Click on the Add button.
3. Enter a name in the Zone name edit box and a brief description into the Zone description edit box.
4. When done, click on the Save and Continue button.
5. When the page loads, it should default to the Configuration tab. Check the Enable Captive Portal checkbox to display other captive portal configuration options.
6. In the Interfaces list box, select the interface(s) on which the captive portal will be enabled.
7. Enter reasonable values in the Idle timeout and Hard timeout edit boxes, as shown in the following screenshot:

8. Check the Enable logout popup window checkbox so that users can explicitly log out before the idle timeout period expires.
9. In the After authentication Redirection URL edit box, enter a redirection URL (such as www.google.com).
10. Scroll down to the Authentication section and make sure Local User Manager/Vouchers is selected.
11. Check the Allow only users/groups with “Captive portal login” privilege checkbox.
12. Scroll down to HTML Page Contents. We will upload a custom page for authentication (Portal page contents). If desired, you can use a portal page that allows entering a voucher code or a username/password combination. At a minimum, your portal page must contain the following fields:
    • <input name="auth_user" type="text">
    • <input name="auth_pass" type="password">
    • <input name="accept" type="submit" value="Continue">

You can also click on the Restore Default Page button in the Portal page's contents section to use pfSense's default captive portal login page.

13. When you are done, click on the Save button.
14. We have set up the captive portal, but we now need to add one or more users using the User Manager, allowing authorized users to log in. Only users with the captive portal login privilege enabled will be able to use our captive portal. Navigate to System | User Manager.

15. Click on the Groups tab, as shown in the following screenshot:

16. Click on the Add button to add a new group.
17. Enter a name in the Group name edit box (such as captive-portal):

18. Enter a brief description in the Description edit box, as shown in the preceding screenshot.
19. Click on the Save button.
20. We must now edit the newly-created group and add the necessary permissions. Click on the Edit icon for the group.
21. There will be a new section on the edit page for the group called Assigned Privileges. In this section, click on the Add button.
22. The Assigned privileges list box should have an entry called User – Services: Captive Portal login. Click on this entry to select it, as shown in the following screenshot:

23. Click on the Save button when you are done. The captive portal login should now be in the Assigned Privileges list, as shown in the following screenshot:

24. Click on the Users tab.

25. Click on the Add button.
26. Enter a username and password combination in the Username and Password edit boxes, as shown in the following screenshot:

27. Enter the user’s full name in the Full name edit box.
28. In the Group membership section, make the user a member of the newly-created captive portal group by clicking on the group in the leftmost list box and clicking on the Move to "Member of" list button. The group should move to the rightmost list box.
29. When done, click on the Save button.
30. Repeat steps 25 to 29 for as many users as you wish to add.