OpenGate Firewall — Captive Portal Lab

You volunteer as the network steward at Larkspur Botanical Garden. The garden wants to offer free visitor Wi-Fi in the conservatory so guests can browse the plant database — but kept off the staff network. You'll turn on a captive portal on the visitor segment so guests accept the terms page before they reach the internet, with sensible limits.

N10-009 · 4.3 AP NET · 3.3.D

Sign in to the firewall console

The console for the visitor-edge firewall is at https://10.20.0.1. Sign in with the steward account.

Username

Password

Services › Captive Portal

Signed in as netsteward | edge: gw-visitor-01

Captive portal zones — a zone is the named portal you attach to an interface

Zone name	Description	Status
No zones yet — add one below.

New zone name

Description

Configure zone:

Bind to interface

Max concurrent connections

Idle timeout (minutes)

min

Hard timeout (minutes)

min

Per-user download limit

Kbit/s

Per-user upload limit

Kbit/s

Require visitors to pass the portal (accept terms) before internet access

Allowed addresses (pass-through) — trusted devices that skip the portal

MAC address	IP / CIDR	Description
No pass-through entries.

MAC address

IP / CIDR

Description

Lab checklist

Check your understanding

Submit completed lab

Callsign (a handle — no real names)

Progress: 0/12 checks passing