Why Captive Portal not working with L2 Isolation?

Zyxel_Melen

Topology:

Nebula managed AP —— SW —— Firewall

SSID configuration:

Answer:

The captive portal page will pop out after the client can resolve the domain. Please ensure your firewall allows the VLAN traffic to resolve the domain/nslookup (UDP 53). If the firewall doesn't allow it, it will cause the captive portal page not to pop out.

Note: If your firewall allows DNS query, please contact @Zyxel_CSO to check or create a post in Nebula category.