# Authorize thermostat **URL:** \ **Category:** Captive Portal\ **Created:** [25 August 2022 12:25 UTC](https://community.ipfire.org/t/authorize-thermostat/8450 "2022-08-25T12:25:32Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [25 August 2022 12:25 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/1 "2022-08-25T12:25:32Z")
Hello everybody I have a problem on the captive portal system, I should connect a thermostat that does not have a web interface to the WiFi system, how can I enter the access code? ---
**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\ **Post date:** [25 August 2022 13:10 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/2 "2022-08-25T13:10:56Z")
Can you add its Mac address to blue access? Not sure if that will work. But worth a try. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [25 August 2022 14:44 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/3 "2022-08-25T14:44:32Z")
the problem is how do I enter the valid coupon to ensure that I have access to unlimited internet from my thermostat ---
**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\ **Post date:** [25 August 2022 14:48 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/4 "2022-08-25T14:48:54Z")
I understand that a coupon. Is not possible. I am wondering if adding its Mac address access page will work instead of coupon. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [26 August 2022 07:50 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/5 "2022-08-26T07:50:10Z")
I did not understand where I have to enter the mac address on the blue network all devices are always authorized to access, the problem is if I do not insert the coupon it does not go out on the internet ---
**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\ **Post date:** [26 August 2022 10:30 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/6 "2022-08-26T10:30:24Z")
Does this not work with Captive portal? > **[Blue Access - The IPFire Wiki](https://wiki.ipfire.org/configuration/firewall/accesstoblue)** ---
**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\ **Post date:** [27 August 2022 01:47 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/7 "2022-08-27T01:47:47Z")
If this doesn’t work. The only thing I would know to do is spoof the mac address of your t-stat On a laptop. Disconnect t-stat. Connect laptop with spoofed mac address. Add coupon then change laptop mac back. And Connect t stat back to ipfire ---
**Author:** ![hvacguy](https://community.ipfire.org/user_avatar/community.ipfire.org/hvacguy/32/8576_2.png) [@hvacguy](https://community.ipfire.org/u/hvacguy)\ **Post date:** [27 August 2022 11:25 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/8 "2022-08-27T11:25:19Z")
My only question is. Are you putting IOT devices on the same Network you have other people on? It would be reachable by them. Is this isolated enough for you? IOT will be calling home alot. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [27 August 2022 15:36 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/9 "2022-08-27T15:36:23Z")
hello, I connect the thermostat on the same network where other people can connect, my thermostat has no interface reachable from the wifi and the traffic is very limited so I don’t think I have any problems using the same network the problem is how to make it navigate, all the tests did not give positive results ---
**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\ **Post date:** [27 August 2022 20:45 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/10 "2022-08-27T20:45:51Z")
In a security view it may be acceptable to have both users and devices in the same network. But there may be a difference in usage. If you admit internet access by Captive Portal ( only ), these must be usable by all members of the network. If the Captive Portal method is exclusive ( all must adher to the procedure ), IOT device must be capable of sending voucher ids or agree to the ‘Terms and Conditions’. If this not possible, you cannot use the captive portal for access admission. My opinion. EDIT: If you want to control webaccess only, you can try the ‘Classroom extensions’ of Squid proxy. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [28 August 2022 13:21 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/11 "2022-08-28T13:21:11Z")
I would like not to mislead on the question posed, how to enable my thermostat using the wifi with the captive portal system. However, I am aware that the choice is not the best but was dictated by some technical issues, the first of not having a second wifi for the site with the various complications and the drafting of a new network cable ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [13 September 2022 16:04 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/12 "2022-09-13T16:04:27Z")
Resolved just edit the clients file located in the /var/ipfire/captive/ directory adding the sequential number, network card macaddres, device ip, Epoch, valid Issued Coupons for instance 10, aa: bb: cc: dd: ee: ff, 172.18.xx.xx, 1649011155,0, xxxxxxxx ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [16 June 2025 11:51 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/13 "2025-06-16T11:51:00Z")
hello after a few updates, I repeated the same procedure adding a new IOT device but the method I indicated no longer works does anyone have any ideas on how to get around the problem or what has changed it would be great to be able to manually insert devices without having to go through the voucher ---
**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\ **Post date:** [16 June 2025 12:09 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/14 "2025-06-16T12:09:20Z")
> [@tratru](#): > > or what has changed In CU192 the code related to showing the uploaded image on the Captive Portal was modified to enable the image display to work again. It had stopped working since CU188. However the code changes involved in their had no impact or modification to what is stored in the settings file or the voucher coupon. > [@tratru](#): > > it would be great to be able to manually insert devices without having to go through the voucher Maybe there is some way to add in a whitelist type approach to allow certain users to be able to connect without a voucher. However I have no idea how at the moment and it will be some time before I can have a look at that. I will try and test out, later this week, on my vm testbed adding the info to the clients file manually and see if I can get it to work or not. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [16 June 2025 12:19 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/15 "2025-06-16T12:19:08Z")
hello and thanks for your reply, I remembered the image change, but I don’t think that change affects my problem the change I reported a few years ago still works today, but if I do it today to add a new device it doesn’t work. I’ll try to do further tests, if you have any advice to solve the problem I would be grateful ---
**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\ **Post date:** [17 June 2025 13:07 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/16 "2025-06-17T13:07:33Z")
I managed to get some time and just tried your method on my CU195 Testing system and it worked. After starting up the PC to be connected I tried to ping [ipfire.org](http://ipfire.org). For around a minute or so it failed to make the connection but then after a minute it worked fine. I could connect to the internet with that machine and I never went near a browser page. I then shut down the PC and the IPFire and then after a while turned them back on again and connection just worked, so it appears that the first time round when the line has first been added to the clients line that it takes a period of time for it to pick up this information and accept it but after that it just works for me. So I think either you have not waited long enough at the first time for it to get connected or maybe there is some error in the line added into the clients file. ---
**Author:** ![tratru](https://community.ipfire.org/user_avatar/community.ipfire.org/tratru/32/8787_2.png) [@tratru](https://community.ipfire.org/u/tratru)\ **Post date:** [18 June 2025 07:44 UTC](https://community.ipfire.org/t/authorize-thermostat/8450/17 "2025-06-18T07:44:08Z")
hello and thanks for the answer and the time spent to perform the test, but let me give an added value to your answer and to my solution proposed a few years ago, which after the tests carried out last night I confirm that it works perfectly. but from the tests carried out, I do not think it is a question of time because it did not work before, unless the time is very long, I would say over an hour or a little less, I think the difference is restarting the firewall, or some service but I have not yet understood which, if I have time and desire I will try to understand it