sophos xg FW captive portal isnt showing for for wifi users

Question

Hi all, 
 
 users that are connected directly to lan network are getting captive portal and it is working fine. But users that are connected by LAN>>wifi router are not gettin captive portal and getting internet directly. 
 
 FW (lan block 10.0.0/24) >> LAN Switch >> users (captive portal works okay) 
 FW (lan block 10.0.0/24) >> LAN Switch >> wifi router >> users (captive portal doesnt work) 
 
 I have attached screenshot of network diagram.

please suggest. 
 
 thanks in advance

Packet0wl · Answer

Adding to what dirk said, Ensure that the WiFi router you have is set in bridged mode. From your configurations, it seems that the router is set in L3 mode which NATs the traffic going towards the firewall by its own IP. That way, Firewall sees all the traffic coming from users connected to router from only 1 IP. If you turn the router in bridge mode, WiFi users will have the same network as LAN. You can separate them by creating a VLAN on Switch and Firewall. If you switch doesn't support VLANs, you can have the router directly connect to one of XG's LAN Ports with a separate network of their own.

sophos xg FW captive portal isnt showing for for wifi users

Top Replies