Captive Portal and DNS not working on MPLS

Hello Nii,

Thank you for contacting the Sophos Community!

What is it you are trying to achieve?

Are you seeing traffic from the MPLS network reaching the XG where the Captive Portal is configured?

Regards,

I want to authentication users at the branch office using the head office XG captive portal. I have one firewall at the head office and a centralized internet connectivity so the branch office connects to the head office through MPLS to the XG for the internet.

I can access the captive portal in the head office LAN but captive portal will not open in the branch office using mpls. I have applied the rules rules.

Please did I miss something?

I want to authentication users at the branch office using the head office XG captive portal. I have one firewall at the head office and a centralized internet connectivity so the branch office connects to the head office through MPLS to the XG for the internet.

I can access the captive portal in the head office LAN but captive portal will not open in the branch office using mpls. I have applied the rules rules.

Please did I miss something?

Hello Nii,

Thank you for the follow-up!

What is the Firewall at the BO?

Are you able to resolve the FQDN of the Captive Portal from a computer behind the BO?

Did you enable the Captive Portal for the Zone of the MPLS?

If you do a packet capture from the HQ GUI on the 8090 port, do you see the traffic arriving to the HQ?

Regards,

There is no firewall at BO. Only a Cisco router.

I am unable to resolve FQDN.

captive portal can not be enabled on MPLS only WAN.

emmosophos said:

Did you enable the Captive Portal for the Zone of the MPLS

I can only enable captive portal on LAN. The WAN portal is gray out

Hello Nii,

Thank you for the follow-up!

Correct if you configured the MPLS zone as WAN the Captive Portal will be grayed out.

Are you seeing the traffic arriving to the XG for 8090.

^EO

Yes I can see traffic in the DNS policy rule and the match known users rule.

Please I do not know whether there is traffic to 8090. I think it has something to do with the DNS. Please help as this is very urgent.

please why is the WAN portal grayed out?

thanks 

The button display LOGIN TO NETWORK in the browser but when I click to open captive portal page 8090, it displays cannot be reached.

what could be the problem?