Technical Tip : Unable to ping any destination with captive portal enabled on the interface

In many organizations, a captive portal is mandatory for authentication.

If anyone wants to access the website, they will be prompted with an authentication page and post providing the credentials they will be authenticated and then they can use the internet.

However the captive portal would be applicable for ICMP traffic, hence Ping will not work.

Check below.

The browsing is working but ICMP is not working.

So to overcome this, it is possible to create a clone policy of LAN to WAN and to  just add the ICMP protocol in service.

After that, it is necessary to use the command 'set captive-portal-exempt enable'.

Post that ICMP started working.