Captive Portal redirection

[mircoceccarini]

Hi,

I have a fortigate 60F with v/.2.8 build1639 (Mature).

I configuring the device with radius and an external captive portl. But I can't get it to work.

This is my interface configuration:

 

This is my authentication settings:

 

This is my dns server: 

 

This is the redirect after connaction:

https :// login. spottywifi. app: 1000/fgtauth ?000d0e91e1a2c32d

[dbhavsar]

Good day @mircoceccarini ,

- Could you please elaborate what exactly you are trying? You can also check this:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Captive-Portal-Authentication-Network-Inte... 

[mircoceccarini]

Thankyou but i use an external captive portal

Mirco

[pminarik]

Do you have any users/groups mentioned in the relevant SSID-><other-interface>policies?

Choosing "allow all" in the interface config expects the relevant users/groups to be defined in the firewall policies. If there's none, the resulting behaviour will just present a local disclaimer to be accepted.

Second, make sure the local portal address defined in User & Auth > Auth Settings does not match the FQDN of the external portal. These two endpoints must be distinct. (I don't see how the "Spotty_2" object is defined, but the name is suspicious enough to highlight this point)

[hbac]

Hi @mircoceccarini,

So you want to use internal3 IP address as a DNS server? Based on the DHCP server settings, users are using 8.8.8.8 for DNS. If users are using 8.8.8.8, you will need to exempt DNS traffic from captive portal. 

Regards, 

[mircoceccarini]

Thank you all, I should have almost solved it. At this time the captive portal only opens on Android devices.
On apple devices it does not open the captive portal devo inserire qualche cosa all'interno.

Interfaces -> Edit Interfaces -> Exempt destinations/service.

Thanks