topic Re: Bypass Guest Authentification for specified URLs/Hosts in Community and Online Support Services

Bypass Guest Authentification for specified URLs/Hosts

tobias_brisach — Wed, 22 Oct 2014 11:08:05 GMT

I am searching for a way to allow unauthentificated clients in a Guest-WLAN to reach specified IPs.

E.g.: The map of the campus is directly downloadable for everyone. If the client wants more, authentification is neccessary.

In a hotspot this can be done with the "walled garden" settings.

I tried with IP based ACL, but it does not work.

Does have anybody an idea about this?

Thx

Tobias

Re: Bypass Guest Authentification for specified URLs/Hosts

michael_brado — Wed, 22 Oct 2014 16:37:21 GMT

You have already mentioned the best solution, HotSpot, and walled garden entries.

Guest Access is designed with inherent client isolation purpose built-in. No one
gets Network access beyond ARP/DHCP/DNS, until they are Authenticated.

Re: Bypass Guest Authentification for specified URLs/Hosts

lonnie_3404113 — Wed, 22 Oct 2014 17:13:37 GMT

But what I think the OP is saying, isn't hotspot functionality broken in 9.8?

Re: Bypass Guest Authentification for specified URLs/Hosts

tobias_brisach — Thu, 23 Oct 2014 15:14:43 GMT

So in the Guest-WLAN with all the nice built-in features, I do have no chance?

Why there is a ACL to be configured?

If I create a new one (e.g. LOCAL-LAN) DHCP and DNS is already preconfigured.