cancel
Showing results for 
Search instead for 
Did you mean: 

Remote APs - Captive portal

Remote APs - Captive portal

agd
New Contributor
I have remotes APs and I want to set an SSID with a captive portal for guest access, but the Internet traffic should be from the local Internet connection where are the APs, not where the controller is located.

It's possible ?

5 REPLIES 5

Ronald_Dvorak
Honored Contributor
The easiest and most secure way (guest can't access intranet) is to connect the controller directly via a unused port to a unused port on the firewall.
The FW is the default gateway and you could use the Google DNS 8.8.8.8 & 8.8.4.4.

Laura
New Contributor III
I am just confused on what IP addresses to use, since I am not very familiar with our network. I will need to find out my default gawteway and dns servers, correct? the rest I just create on my own?

Ronald_Dvorak
Honored Contributor
Hi Laura,

Yes, if you configure it per the above example you should be fine.

If you don't use a dedicated firewall for guest access (= the FW is also used for your internal network) make sure to create rules on the firewall to deny traffic from the guest VLAN to the intranet interfaces/resources.

-Ron

Laura
New Contributor III
I think I am trying to create the same thing, if this is what it does:...this captive portal lets guests users logon to a guest SSID and only be able to access the internet, not our other network resources?

GTM-P2G8KFN