pfSense Captive Portal for Guest Wi-Fi: What It Actually Controls and Where It Leaks
pfSense captive portal can provide guest Wi-Fi sign-in and isolation on a single box, but it is an HTTP redirect gate with clear protocol and UX limits. Here is how to design it, configure a local auth example, and verify the limits.