Setting up Captive Web Portal with guest network, to work like a hotel or airport wireless portal.

[msmith3]

I have a mixture of AP 250 's and AP 550's . We are wanting to set up the Captivate Web-Portal, were a user needs to provide a valid email address before they are able to sign into the guest wireless network, like you need to do at an Airport or Hotel. I have gone through all the documentation I can find on this. I did try the solution found here https://thehivecommunity.aerohive.com/s/article/Self-Registration-PPSK-SSID-in-Hivemanager?language=en_US 

But I want to eliminate having to create a second SSID and having someone put in a non valid email. I also know you can setup it up with Social Login but the powers to be, do not want to go that route. Can this be done? and if so how?

Thanks!

[msmith3]

Thank You both for the helpful insight!

We do have a syslog server running so that is very doable, I will look into both of these options. This will at least get me started on the right path.

Thanks again for the help, it's greatly appreciated.

[samantha_lynn]

If you set up an Open SSID with a CWP including Enable Self-Registration (without Return Aerohive Private PSK), then users will enter their information and be allowed on to the network. This eliminates the need for the second PPSK SSID, but we don't have a way to check if the email is valid before allowing connection. You would also need to set up a syslog server to collect the email addresses, as these will be logged only in to the buffered log of the AP and the buffered log data overwrites itself after a time.

[weekdaysailor]

The open SSID is required, as that's the only way to have a communication with the client in order to present the sign-in form.

If someone provides an invalid email address, they simply won't be able to get the credentials, and won't be able to use the protected network. I think you could modify the form to provide additional validation (for e.g 2 email fields that must match, have valid email format, etc)

Did you have a different concern?

The only alternative would be concierge mode where a staff member creates the credentials for them and print them out.