Configuring a Captive Portal on an AP

Firewall Friendly External Captive Portal (FFECP) on the AP for B@AP topologies is an extension to Firewall Friendly Captive Portal on the controller for tunneled (B@AC and routed) topologies.

You can configure the FFECP with full authentication using a URI and signature, or you can configure a RADIUS server, authenticating with a user name and password.

To configure an External Captive Portal on an AP, the following is required:

• The WLAN (Wireless Local Area Network) Service topology must be VLAN B@AP.
• You must configure specific policy rules that defines which traffic is allowed, which traffic is denied, and if using Rule-based Redirection, which traffic is redirected.
• The Captive Portal must be configured as External Firewall Friendly.

Note

ExtremeWireless v10.31, supports a non-topology specific implementation. Extreme will register sub-domain “portal.ezcloudx.com” and populate public/Extreme DNS server with DNS mapping of 1.1.1.1 for FQDN “portal.ezcloudx.com”.

In Example: Policy Rules for non-authenticated role, the default Access Control on the VLAN is Deny. Rules are created to allow the ECP URL, allow DNS and DHCP traffic, and to allow all outgoing MU traffic, and to redirect specific traffic.

Example: Policy Rules for non-authenticated role