Bypass Guest Authentification for specified URLs/Hosts

Question

I am searching for a way to allow unauthentificated clients in a Guest-WLAN to reach specified IPs.

E.g.: The map of the campus is directly downloadable for everyone. If the client wants more, authentification is neccessary.

In a hotspot this can be done with the "walled garden" settings.

I tried with IP based ACL, but it does not work.

Does have anybody an idea about this?

Thx

Tobias

unknown · Answer

So in the Guest-WLAN with all the nice built-in features, I do have no chance?

Why there is a ACL to be configured?

If I create a new one (e.g. LOCAL-LAN) DHCP and DNS is already preconfigured.

unknown · Answer

But what I think the OP is saying, isn't hotspot functionality broken in 9.8?

michael_brado · Answer

You have already mentioned the best solution, HotSpot, and walled garden entries.

Guest Access is designed with inherent client isolation purpose built-in.  No one

gets Network access beyond ARP/DHCP/DNS, until they are Authenticated.