Technical Tip: Captive Portal Authentication - Network Interface

[msanjaypadma]

Description

This article describes the basic configuration of captive portal authentication on a network interface. 

Scope

FortiGate v6.0 and above.

Solution

Configuration of captive portal authentication on network interface based.

1. Configure users and add users in the User group.
   
   
2. Edit interface configuration where the user will connect, Network -> Interface, then select interface and edit (e.g.: port2 ) enable Security Mode and add User groups: Specify user group who needs to be get authenticated. 

The captive portal option will not be enabled if the Interface role is WAN or DMZ. Change the interface role to either LAN or Undefined to configure the captive portal. 

3. Verification:

• Go to the Client system and try to access any website (for example: www.google.com).
• The Web-based captive portal authentication page will appear.
• Enter valid Username and Password as configured in the firewall local user group.

 Once the user is authenticated successfully, the user will be redirected to the below page.

Note that the Local Captive portal is not available in the bridge SSIDs.

To use a local captive portal on the bridged mode SSID, it must enabled on the interface the SSID is bridged from.

Related document:

Captive portals