Hotspot without authentication ?

[philip_francis1]

Hello, I have a third party Onboarding server - FortiConnect.
This server presents a login web GUI, where after authentication the user is directed to another  page where they can download an onboarding app.
What I want Zonedirector to do is as follows:

- user connects to Zonedirector SSID. 
- FIRST REDIRECT: Zonedirector redirects user to Forticonnect (have done this successfully with a Hotspot service)
- user authenticates on the ForitiConnect website
- SECOND REDIRECT: user is redirected by FortiConnect to another FortiConnect Onboarding download website (this is where it fails for me. I think Zonedirector is expecting authentication details and will not allow another redirect until it receives them ?)

So, how can create a Zonedirector Hotspot service which redirects to FortiConnect and then allows further redirects. I do not want Zonedirector to authenticate at all. 
The only reason I want the Hotspot feature is to allow auto redirect to FortiConnect. Forticonnect will then handle authentication and redirects etc. completely separate from ZoneDirector.

[robert_lowe_722]

That is correct but there are 2 issues here for your use case:
1. The ZD will not do any auto redirect to walled garden addresses. It will only redirect to the authentication URL and the post authentication URL (if configured). So you will need some other way of doing the second redirect.
2. Unless the client moves to another SSID after Forticonnect authentication it will always be seen by the ZD as being in an 'unauthenticated' state (because it hasn't received RADIUS accept) so will always be blocked from internet access other than walled garden addresses.

[philip_francis1]

Thank you, but I am not expecting the Zonedirector to do a second redirect itself. The second redirect is initiated from my third party server. I just need Zonedirector to allow access to that site.

[robert_lowe_722]

Ok have you tried adding as an IP instead of URL? 

What version of firmware are you using?