Configuring a Captive Portal on an AP

ExtremeWireless offers a scalable captive portal solution on the AP that can be managed locally or through a Cloud solution. The distributed solution is available on ExtremeWireless AP38xx series and AP39xx series APs.

Firewall Friendly External Captive Portal (FFECP) on the AP for B@AP topologies is an extension to Firewall Friendly Captive Portal on the controller for tunneled (B@AC and routed) topologies.

You can configure the FFECP with full authentication using a URI and signature, or you can configure a RADIUS server, authenticating with a user name and password; however, mobile user roaming is not supported with central RADIUS authentication.

The DHCP (Dynamic Host Configuration Protocol) IPv4 address pool used by un-authenticated clients must be large enough to provide additional IP addresses to all APs configured with Firewall Friendly External Captive Portal (ECP). This is because each AP creates a virtual interface on each non-authenticated policy VLAN and assigns an IP address to it from the pool.

To configure an External Captive Portal on an AP, the following is required:
  • The WLANS topology must be VLAN B@AP.
  • You must configure specific policy rules that defines which traffic is allowed, which traffic is denied, and if using Rule-based Redirection, which traffic is redirected.
  • The Captive Portal must be configured as External Firewall Friendly.