Captive Portal Setup with open WiFi SSID

Difficulty level: intermediate

Minimum firmware: 18.8.14.37

Goal

To setup a captive portal authorization page that users must accept before gaining Internet access through an open WiFi SSID of the 63xx-series router.

Background

63xx-series routers provide a captive portal feature that can be applied to one or more SSIDs or LAN ports.  Users can customize the logo and text presented on the captive portal, as well as setting up different types of authentication.  The full list of available configuration options for a Captive Portal are:

  • Interface:  the network interface to associate with the captive portal
  • Session timeout: how long a user is authenticated before they must re-authorize through the captive portal
  • Portal HTTP access: Controls whether the captive portal authorization page can be accessed over HTTP, HTTPS, both, or redirected from HTTP to HTTPS
  • Authorization
    • simple click-to-accept and continue
    • username/password authentication - users are managed locally on the ACL router
    • required text info collection, and then click-to-accept
  • Title: title shown at the top of the captive portal authentication page
  • Message:  message shown under the title on the captive portal authentication page
  • Terms and conditions: the terms and conditions shown on the authentication page.  The user must accept  these terms in order to authenticate with the captive portal.
  • Redirect to URL: The website the user is redirected to after they authenticate with the Captive Portal

Setup

You will need to determine the SSID(s) or LAN networks you want to add the captive portal to before configuring the captive portal in 63xx-series router.  For help with configuring a SSID, see the following article:

Add a New SSID

If you wish to apply the captive portal to multiple SSIDs and/or LAN ports, you will need to create a bridge and add those SSIDs/ports to the bridge, then assign that bridge to the network interface created for the captive portal.

Sample Configuration

The following configuration setting show a sample setup of an open SSID, a separate interface/network for that SSID, and adding a captive portal to that SSID.

Demo WiFi connection and Captive Portal Auth

Two demos are listed below.  The first shows a demo connection from a phone, the second from a Chromebook.

https://www.dropbox.com/s/jm7zrlshmg09yru/VID_20180809_142438748.mp4?dl=0