WatchGuard Support Center

Knowledge Base - Article

000014034
 Guest Wi-Fi Access when Captive Portal services unavailable

Information
How do I allow guest Wi-Fi access when Captive Portal services are unavailable during Wi-Fi Cloud upgrades and maintenance?
During Wi-Fi Cloud maintenance upgrades when Captive Portal splash pages are unavailable for Guest Wi-Fi access, you can configure your Captive Portal settings on your guest SSID to allow temporary access until the upgrade is complete.

You can use these methods:
 
Disable the captive portal and use a WPA2 PSK password for the Guest Wi-Fi SSID instead of a portal 

With this method, you can disable the captive portal and use WPA2 security with a passphrase for guest Wi-Fi SSID access.
  1. Open Manage, then select Configuration > Device Configuration > SSID Profiles.
  2. Select the SSID you use for guest/portal access.
  3. In the Captive Portal settings, clear the Enable Captive Portal check box.
  4. In the Security settings, make sure you select WPA2 PSK security and type a passphrase that clients can use to connect.
  5. Save the SSID Profile.
 Use the AP Hosted Splash Page for Click-through option
 
The AP Hosted Splash Page for Click-through portal option allows your guests to use simple click-through authentication utilizing a portal based on the AP itself.
  1. Open Manage, then select Configuration > Device Configuration > SSID Profiles.
  2. Select the SSID you use for guest/portal access.
  3. In the Captive Portal section, select AP Hosted Splash Page for Click-through.
  4. Save the SSID Profile.  
Increase the Login Timeout on the Captive Portal

Client devices that authenticate to the Captive Portal prior to the maintenance window will continue to have Internet connectivity via Guest Wi-Fi as long as the login timer does not expire. Increase the Login Timeout of the portal to ensure that client devices will not timeout and attempt to reauthenticate during the Wi-Fi Cloud maintenance window.
  1. Open Manage, then select Configuration > Device Configuration > SSID Profiles.
  2. Select the SSID you use for guest/portal access.
  3. In the Captive Portal settings, modify the Login Timeout. The default is 24 hours.
  4. Save the SSID Profile.
If the portal also specifies a Login Timeout per authentication type, open Analyze, select Portals, select the portal to modify, then select the Plug-in QoS tab to modify the individual Login Timeout values.