pfSense Setup
Configure WiZone RADIUS
This section explains how to configure RADIUS authentication, certificates, DNS resolver, and captive portal for WiZone.
Step 1 - Add RADIUS Server
Get your RADIUS configuration values from the WiZone Portal
- Log in to the WiZone Portal
- Go to the Devices page
- Select your device
- Copy the RADIUS SERVER IP and SHARED SECRET values
- Go to System → User Manager → Authentication Servers → Add.
- Configure using values from your WiZone Portal device configuration:
| Field | Where to Find Value | Description |
|---|---|---|
| Descriptive Name | (choose any name) | A name for this RADIUS configuration (e.g., rad_wizone). |
| Type | RADIUS | Select RADIUS as the authentication type. |
| Protocol | PAP | Authentication protocol used by WiZone. |
| Hostname / IP Address | RADIUS SERVER | (Copy from WiZone Portal Device Configuration)![]() |
| Shared Secret | SHARED SECRET | (Copy from WiZone Portal Device Configuration)![]() |
| Services Offered | Authentication and Accounting | Enables both user authentication and usage accounting. |
| Authentication Port | 1812 | Standard RADIUS authentication port. |
| Accounting Port | 1813 | Standard RADIUS accounting port. |
| RADIUS NAS IP Attribute | (use your WG interface IP) | Select the WireGuard interface created earlier (e.g., WG_WiZone - 10.255.0.3). |

- Click Save, then test your configuration.
(Optional) Test Authentication
- Go to Diagnostics → Authentication.
- Select the newly added server
rad_wizone. - Enter the following test credentials:
| Username | Password |
|---|---|
radtest | radtest123 |

A successful test should display the message: (User radtest authenticated successfully.)
Step 2 – Import Certificate
Get your SSL certificate from the WiZone Portal:
- In your device configuration page, scroll down to Certificate for captive.wizone.io
- Click Copy Certificate to copy the public certificate
- Click Copy Private Key to copy the private key
- Go to System → Certificates → Certificates → Add/Sign.
- Under Method, select
Import an existing certificate. - Fill in the details:
| Field | Where to Find Value | Description |
|---|---|---|
| Descriptive Name | captive.wizone.io | Identifies WiZone captive certificate |
| Certificate Type | X.509 (PEM) | Format of the imported certificate |
| Certificate Data | Copy Certificate | Copy the public certificate from the WiZone Portal. |
| Private Key Data | Copy Private Key | Copy the private key from the WiZone Portal for SSL authentication. |

Step 3 – Add DNS Resolver Entry
- Go to Services → DNS Resolver → General Settings → Host Overrides → Add.

- Add a host record to map captive portal name to local IP:
| Field | Value |
|---|---|
| Host | captive |
| Domain | wizone.io |
| IP Address | 10.10.252.1 |


