Nebula [Authentication] - Captive Portal Setup on a Firewall [Nebula Security Gateway]

The Zyxel Nebula Security Gateway (NSG) Series, designed as SMB gateway units, offers an integrated captive portal. This tutorial will show you how to configure it in no time!

1. Log in to nebula.zyxel.com
2. Choose the respective organization and site that needs Captive Portal configuration
3. Navigate to

Site-wide > Configure > Firewall > Authentication method 

1. choose the LAN interface at which the clients should authenticate and the “Sign-on with: Nebula Cloud Authentication” method
   
2. Enable “Walled Garden” to add addresses that clients can access without authenticating via Captive Portal
3. Under Captive portal access attributes, you can choose if the clients are allowed to create accounts and if they can log in with one account from multiple devices
4. Under “NCAS disconnection behavior” you can define which clients are blocked when the Nebula Cloud Server is not accessible and click “Save”
5. Navigate to

   Site-wide > Configure > Cloud Authentication

6. to create a user account with the “Account Type: Guest” by clicking “Add”
7. After filling the credentials for the user, set “Authorized” to Yes and click “Create User”
8. Click ”Save” in the Cloud Authentication screen once again

Please note: Navigate to

Site-wide > Configure > Firewall > Authentication Method

to add general Walled Garden addresses which are not only applying to a specific authentication method.

See this article on how to configure Captive portal on your Nebula WiFi: 

Nebula - Configure Captive Portal on SSID

The account type “User” would need an Active Directory / RADIUS server.