# Captive Portal / Squid interaction

**URL:** <https://community.ipfire.org/t/captive-portal-squid-interaction/2114>\
**Category:** Captive Portal\
**Created:** [29 April 2020 19:06 UTC](https://community.ipfire.org/t/captive-portal-squid-interaction/2114 "2020-04-29T19:06:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pollux](https://community.ipfire.org/user_avatar/community.ipfire.org/pollux/32/4804_2.png) [@pollux](https://community.ipfire.org/u/pollux)\
**Post date:** [29 April 2020 19:06 UTC](https://community.ipfire.org/t/captive-portal-squid-interaction/2114/1 "2020-04-29T19:06:03Z")

</div>

Hello everyone  
I introduce myself Pollux, new kid among the IPFire community.  
Former IPcop user.  
I allow myself to come to you so that you can enlighten me on my little problematic.  
I am currently using a raspberry PI3 B with the latest version of IPFire (144).  
It is in Green + Red configuration, a little special feature Green (Wifi) and Red (Eth). For use with Router / Firewall / Squid.  
Currently authentication is done through the Captive Portal (coupon) and Squid is in transparent mode.  
My little worry is this.  
In the Squid logs, I have all the connections but only spotted by the ip. I would have liked a match to be made with the coupon or another means of identifying my captive portal users.

---

<div class="post-metadata">

**Author:** ![pmueller](https://community.ipfire.org/user_avatar/community.ipfire.org/pmueller/32/9019_2.png) [@pmueller](https://community.ipfire.org/u/pmueller)\
**Post date:** [30 April 2020 06:04 UTC](https://community.ipfire.org/t/captive-portal-squid-interaction/2114/2 "2020-04-30T06:04:06Z")

</div>

Hi,

unfortunately, this is not possible at the moment because the Captive Portal  
authentication has nothing to do with Squid access.

I suggest using explicit [proxy authentication](https://wiki.ipfire.org/configuration/network/proxy/wui_conf/auth/local) instead.

Thanks, and best regards,  
Peter Müller

---

<div class="post-metadata">

**Author:** ![pollux](https://community.ipfire.org/user_avatar/community.ipfire.org/pollux/32/4804_2.png) [@pollux](https://community.ipfire.org/u/pollux)\
**Post date:** [30 April 2020 17:33 UTC](https://community.ipfire.org/t/captive-portal-squid-interaction/2114/3 "2020-04-30T17:33:37Z")

</div>

Thank you for your reply.  
Unfortunately it doesn’t help much; (  
I use IPFire as part of a small association as a hot spot. It seems easier for me to authenticate my various users through a captive portal. The use of squid authentication seems to me too difficult with the disparity of hardware used (PS4, Mobil (Samsung / Apple / Huawei / …), PC, …).  
I hope that one day there will be the possibility of linking the two systems.  
Or at least have the logs of the users who connect to the captive portal.  
After that I will only have to reconcile the authenticate IP of the captive portal logs to the IP of the Squid logs.  
Anyway thank you for your help.  
cordially

---

<div class="post-metadata">

**Author:** ![pmueller](https://community.ipfire.org/user_avatar/community.ipfire.org/pmueller/32/9019_2.png) [@pmueller](https://community.ipfire.org/u/pmueller)\
**Post date:** [1 May 2020 08:18 UTC](https://community.ipfire.org/t/captive-portal-squid-interaction/2114/4 "2020-05-01T08:18:50Z")

</div>

Hi,

rolling out proxy settings to the masses is a difficult task indeed  
(some devices lack proxy support at all or do not sufficiently support  
proxy authentication). However, while a proxy works at the application  
layer (OSI 7), your assumption seem to be based on layer 3: Any IP  
connection a client established can be traced back to a username.

While this is true in your scenario (what about clients opening ad-hoc  
WLAN networks for others?), I doubt it will be for most environments,  
particular when it comes to NAT.

Sorry for not being able to give you a more positive answer.

Thanks, and best regards,  
Peter Müller