Configure External Captive Portal Redirection

1. Select Configure > Roles > Add and configure a role. (Alternatively, edit an existing role.)
2. For the Default Action field, select Allow.
3. Select (next to the new rule).
   The Rules dialog opens.
4. Expand the L3,4 pane.
5. Select New to add a rule. Set the Ethertype to Internet Protocol, version 4 (IPv4). Set the Port to HTTP.
6. In the Direction pane, edit the fields:

   From User	Specify Destination (dest) as the value.
   To User	Specify None as the value.

7. In the Access Control field, select Redirect, and then select Enter Redirection URL that displays.
   

   Rules Configuration - Access Control Settings

   
   The Redirection URL window opens.
8. Enter the URL for the captive portal gateway or select an existing URL from the drop-down list. Select Close > Close.
   

   Redirection URL Configuration

   
   The Role configuration page now displays the Configure Redirect pane.
9. Edit the fields.
   

   Role Configuration

   

   Identity	Specify the name common to both the AP and the external web server to encrypt the information passed between the AP and the external web server. The identity also tells the receiver which shared secret to use to validate the message signature. If you do not configure the identity, the redirector on the AP drops the traffic.
   Shared Secret	Specify the password that will be used to validate the connection between the AP and the external server. Limits: 16 - 225 characters.

10. (Optional) Configure advanced redirection settings, which includes specifying a custom URL for the success page after the customer logs in.
11. Select Add Allow Rules, and enter the IP subnet for the portal.
12. Repeat steps 2 - 11 to create a rule that redirects HTTPS traffic. (You must then configure the advanced redirection settings to enable the Use HTTPS for User Connection option.)
    The rule is created and displays in the Rules list.
13. Add other access control rules as appropriate. Be sure to allow access for DHCP, DNS, and ARP requests.
14. Save the role.
15. Configure a network by selecting Networks > Add or by editing an existing network.
16. Select the newly defined role from the Default Unauth Role list.
17. If needed, make additional changes to the network's configuration.
18. Save the network configuration.