You can enable one SSID on your WatchGuard AP as a hotspot. You can enable a hotspot on one SSID or network at a time.
When you enable the hotspot feature for an SSID, wireless clients see a hotspot splash screen page when they connect to the SSID. You can configure the hotspot to require wireless clients to accept terms and conditions. Or, you can configure an external hotspot authentication server that requires wireless clients to provide information that can be validated before the wireless client is allowed to connect to the network.
When you enable a hotspot for an AP SSID, the hotspot interface you select depends on how you configure the SSID and how your APs connect to the Firebox.
- If the SSID has VLAN tagging enabled, select the VLAN interface with the VLAN ID configured in the SSID.
- If the SSID does not have VLAN tagging enabled, and the AP is directly connected to a Firebox interface, select the Firebox interface your AP is connected to.
- If the SSID does not have VLAN tagging enabled, but the APs that use the SSID connect to Firebox VLAN interfaces that manage only untagged VLAN traffic, select the untagged VLAN as the hotspot interface.
If you connect the AP to a switch but do not use VLAN tagging, you cannot enable the hotspot only for traffic that goes through the AP. If you enable the hotspot for the Firebox interface the switch connects to, the hotspot is enabled for all traffic through that Firebox interface.
To enable a hotspot for an AP, configure the hotspot settings on the Firebox that is paired with the AP. For more information about how to configure a hotspot, go to Configure a Hotspot.