External Captive Portal Redirect Error

[capitansec]

Hello,

I'm trying to implement an external captive portal. For this, I designed a React frontend and I'm using a RESTful service to send accessRequest and CoA requests over RADIUS on the firewall. I created a dedicated VLAN for the guest network and configured the external captive portal through Network > Interfaces. I also set up FreeRADIUS and performed connectivity and authentication tests, all of which worked smoothly as described in the documentation.

After completing these steps, I connected to the Wi-Fi network with my mobile phone and obtained an IP address, but instead of being redirected to the captive portal login page, I was taken directly to the company’s homepage. To resolve this issue, I tried moving all the captive portal pages to the public cloud. I even created some static HTML pages to test the redirection, but unfortunately, I haven’t made any progress yet.

 

[ap]

Hi @capitansec ,

Please check below article on how to troubleshoot if captive portal is not getting triggered:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-if-captive-porta...

Regards,

Ankit

If you have found a solution, please like and accept it to make it easily accessible to others.

[kaman]

Hi capitansec,

You configured Captive Portal External Authentication .

Please refer to the below document for more information:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Captive-Portal-External-Authentication-in-...

Regards,
Aman

[capitansec]

@ap @kaman thanks guys. It didn't work. Configurated settings as you reffeer. What else can I try?

[qumhh]

The only way to avoid this from the FortiGate's side is to process it all through HTTPS -> config user setting > set auth-secure-http enable > end.
The price to pay is that you will need a valid certificate for the hostname used in that URL. (the redirection URL hostname is configurable in config firewall auth-portal)