Smoothwall - Unifi - VLAN - Captive Portal

[DDR5]

Hey all,
I've eventually got around to setting up a VLAN specifically for Guest WiFi, but I'm having issues with the captive portal. 
If I disable the portal and just have a password for authentication, it works fine. As soon as I enable the portal, I can't get online. I cannot ping the controller and the browser won't load the portal.
I've looked at firewall rules on Smoothwall and thought that by creating a rule would help, but it doesn't.

I wanted to use the voucher system and it worked fine before I setup the VLAN.

What am I missing? So frustrating!

[StephenPink]

Are you using/have you configured a separate interface on the Smoothwall, for the Guest VLAN?

[DDR5]

Yeah, the VLAN is working perfectly. If I disable the Unifi Portal and just connect with a password, I get online without issue with the correct IP etc. Everything works.

 

With the Portal enabled, I can see the device in Smoothwalls DHCP with the correct IP and I can even see it connected to the AP in Unifi, I just cannot get to the portal page to verify the connection.

 

I'm guessing that the VLAN needs to be able to communicate with the VM that hosts the Unifi software, but even with a firewall rule allowing it, I can't even ping it. However, from the VM I can ping the VLAN gateway

 

 

 

[tom_newton]

Remember for a firewall rule to allow ping you'll need to explicitly add ICMP - so not always a great diagnostic. I'd look at "can you connect in the way the devices need to" - eg can you telnet to the port. I'm not quite able to visualise whats going on to be able to troubleshoot this.

[DDR5]

From what I have read, I need to put in the controllers IP and the VLAN gateway into Unifi's 'Pre Authorization Allowances' - this, by all accounts, will allow access to the portal, and from there I should be able to authenticate and get on...will see how it goes tomorrow...