Skip to main content
mircoceccarini
Explorer
June 26, 2024
Question

Captive Portal redirection

  • June 26, 2024
  • 5 replies
  • 2500 views

Hi,

I have a fortigate 60F with v/.2.8 build1639 (Mature).

I configuring the device with radius and an external captive portl. But I can't get it to work.

This is my interface configuration:

 

Screenshot 2024-06-26 alle 16.48.45.png

 

This is my authentication settings:

Screenshot 2024-06-26 alle 16.50.21.png 

 

This is my dns server: 

 

Screenshot 2024-06-26 alle 16.52.06.png

 

This is the redirect after connaction:

https :// login. spottywifi. app: 1000/fgtauth ?000d0e91e1a2c32d

5 replies

dbhavsar
Staff
Staff
June 26, 2024

Good day @mircoceccarini ,

 

- Could you please elaborate what exactly you are trying? You can also check this:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Captive-Portal-Authentication-Network-Interface/ta-p/211018 

mircoceccarini
Explorer
June 27, 2024

Thankyou but i use an external captive portal

 

Mirco

pminarik
Staff
Staff
June 27, 2024

Do you have any users/groups mentioned in the relevant SSID-><other-interface>policies?

Choosing "allow all" in the interface config expects the relevant users/groups to be defined in the firewall policies. If there's none, the resulting behaviour will just present a local disclaimer to be accepted.

 

Second, make sure the local portal address defined in User & Auth > Auth Settings does not match the FQDN of the external portal. These two endpoints must be distinct. (I don't see how the "Spotty_2" object is defined, but the name is suspicious enough to highlight this point)

Hong_FTNT
Staff & Editor
Staff & Editor
June 27, 2024

Hi @mircoceccarini,

 

So you want to use internal3 IP address as a DNS server? Based on the DHCP server settings, users are using 8.8.8.8 for DNS. If users are using 8.8.8.8, you will need to exempt DNS traffic from captive portal. 

 

Regards, 

mircoceccarini
Explorer
June 27, 2024

Thank you all, I should have almost solved it. At this time the captive portal only opens on Android devices.
On apple devices it does not open the captive portal devo inserire qualche cosa all'interno.

Interfaces -> Edit Interfaces -> Exempt destinations/service.

Thanks

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!