Guest Wifi with captive portal?

Question

I am new to the Sophos XG Firewall, and I am trying to set up a guest wireless network on a separate vlan that only has internet access, AFTER the user logs into the captive portal. I have the separate SSID set, and I can browse the internet. I have the geust ssid working, and internet is browsable, but I am at a loss as to the captive portal part... can you help?

This thread was automatically locked due to age.

lferrara · Accepted Answer

Justin, 
 Captive portal can be enabled globally or on single firewall rule. 
 Share screenshots of your config, how the different networks are connected, default gateway, etc. 
 Regards

Aditya Patel · Answer

HI Justin , 
 On your Guest SSID is your traffic Tagged and forwarded to your XG LAN interface? 
 Have you created a VLAN alias on LAN interface on your XG ? 
 If the traffic is Tagged via the Guest User , make sure you create a LAN to WAN rule with the VLAN network as a Source Network and check on Match users. Make sure this rule is on the TOP position for priority. 
 Conduct a Packet capture and check the traffic which rule does the traffic traverses through. You may use the command tcpdump 'host <host address of the Guest Machine >