Chapter 4 Authentication : Captive portals : Configuring a captive portal
  
Configuring a captive portal
Captive portals are configured on network interfaces. On a physical (wired) network interface, you edit the interface configuration in System > Network > Interfaces and set Security Mode to Captive Portal. A WiFi interface does not exist until the WiFi SSID is created. You can configure a WiFi captive portal at the time that you create the SSID. Afterwards, the captive portal settings will also be available by editing the WiFi network interface in System > Network > Interfaces.
To configure a wired Captive Portal - web-based manager
1. Go to System > Network > Interfaces and edit the interface to which the users connect.
2. In Security Mode select Captive Portal.
Figure 75: Wired captive portal settings
3. Enter
Authentication Portal
Local - portal hosted on the FortiGate unit
Remote - enter FQDN or IP address of external portal
User Groups
Select permitted user groups or select Use Groups from Policies, which permits the groups specified in the security policy.
Use Groups from Policies is not available in WiFi captive portals.
Exempt List
Select exempt lists whose members will not be subject to captive portal authentication.
Customize Portal Messages
Enable, then select Edit. See “Customizing captive portal pages”.
4. Select OK.
To configure a WiFi Captive Portal - web-based manager
1. Go to WiFi Controller > WiFi Network > SSID and create your SSID.
If the SSID already exists, you can edit the SSID or you can edit the WiFi interface in System > Network > Interfaces.
2. In Security Mode, select Captive Portal.
Figure 76: WiFi captive portal settings
3. Enter
Portal Type
The portal can provide authentication and/or disclaimer, or perform user email address collection. See “Introduction to Captive Portals”.
Authentication Portal
Local - portal hosted on the FortiGate unit
Remote - enter FQDN or IP address of external portal
User Groups
Select permitted user groups or select Use Groups from Policies, which permits the groups specified in the security policy.
Exempt List
Select exempt lists whose members will not be subject to captive portal authentication.
Customize Portal Messages
Click the link of the portal page that you want to modify. See “Customizing captive portal pages”.
4. Select OK.