Captive Portal / Password Requirement

10 replies
14417 views

We have a hotel that wants to use a captive portal on an interface so that the user needs to agree to terms and conditions before using the internet. We see how to set this up.

The hotel would also like to limit this access to users that have been given a password. The hotel does not want to have to create usernames/passwords for each person, but would instead like a generic password that all users would enter to use the network. They would like to change this password twice a year.

Is this possible? If so how would this be accomplished?

Toshi_Esumi

SuperUser

Check below. I used captive portal only for WiFi so far but seems to work on an interface as well.

http://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-authentication-54/CaptivePortals.htm

SecurityPlusAuthor

Explorer III

Thank you. We will continue to work through the setup and testing.

This customer does not use FortiWiFi WAP's. They use older Netgear wireless access points in the hotel rooms. All are set to the same SSID's and all connected via a switch to the same FortiGate interface. Do you think that this will work for both the wired and wireless connections? I'm wondering if the wireless connections will appear to be wired connections by the time they get to the FortiGate since all the wireless issues are taken care of by the Netgear WAP's?

Toshi_Esumi

SuperUser

With the current WiFi connection, the users need to type WAP PSK to get on WiFi then once they opened a browser they will see a FG's captive portal. Theoretically, if you could separate interfaces at FG, physical ports or VLANs, you would have an option not to set captive portal on the interface WiFi routers are connected to, so that WiFi users need to enter only WAP PSK, while wired users user a captive portal.

Sign up

Login with SSO

Login to the community

Login with SSO