Enable a Hotspot

You can configure the guest network on your Firebox or XTM device as a hotspot to give Internet connectivity to your visitors or customers. When you enable the hotspot feature, you have more control over connections to your guest network. You can configure the hotspot feature for connections to either a wireless or a wired guest network on your Firebox or XTM device. You can also configure the hotspot feature for connections through a WatchGuard Access Point (AP) device.

When you configure your Firebox or XTM device as a hotspot, you can customize:

If you configure the hotspot for connections through a WatchGuard AP device, the interface you select for the hotspot depends on the interface configuration on the AP device.

For more information about how to configure an SSID for a WatchGuard AP device, see Configure WatchGuard AP Device SSIDs.

If you enable a hotspot on a wireless Firebox or XTM device, you can select one of these interfaces:

When you enable the hotspot feature, the Allow Hotspot-Users policy is automatically created. This policy allows connections from the guest interface to your external interfaces. This gives hotspot users access to the Internet without access to computers on your trusted and optional networks.

If your hotspot is for a wireless network connection, before you set up a wireless hotspot, you must configure the settings for your wireless guest network as described in Enable a Wireless Guest Network (Fireware XTM OS v11.8.x and Lower).

To enable the hotspot:

  1. Select Authentication > Hotspot.
    The Hotspot page appears with the Hotspot Connections tab selected.
  2. Select the Enable Hotspot check box and select an interface from the drop-down list.
    You cannot select an External physical interface for a hotspot.

Screen shot of the Hotspot page

  1. Complete the configuration settings as described in the subsequent sections.

If you disable the hotspot feature, or change the hotspot connection method, all current guest user accounts are removed.

Configure User Timeout Settings

You can configure timeout settings to limit the amount of time that users can continuously use your hotspot. When the timeout period expires, the user is disconnected. When users are disconnected, they lose all Internet connectivity, but are still connected to the network. The hotspot splash screen reappears and the users must accept the Terms and Conditions again before they can continue to use the hotspot. You can also specify the amount of time users are locked out of the hotspot after their sessions expire.

  1. In the Session timeout text box and drop-down list, type or select the maximum amount of time a user can remain continuously connected to your hotspot, and select the unit of time.
    If the Session timeout is set to 0 (the default value), guest users are not disconnected after a specified time interval.
  2. In the Idle timeout text box and drop-down list, type or select the amount of time that a user must be idle for the connection to time out, and select the unit of time.
    If the Idle timeout is set to 0, users are not disconnected if they do not send or receive traffic.

Select the Hotspot Type

Select a hotspot type to specify how your Firebox or XTM device manages the initial user connection to your hotspot.

There are two hotspot types:

Custom Page

For a Custom Page hotspot, when a user connects to the hotspot URL, the Firebox or XTM device shows the hotspot splash screen that you configure on the Firebox or XTM device. The user must accept the terms and conditions you specify in order to use the hotspot. Custom Page is the most common hotspot type, and is the default type.

External Guest Authentication

For an External Guest Authentication hotspot, when a user connects to the hotspot URL, the Firebox or XTM device redirects the user to a URL on an external web server that you set up. You configure the page on the external web server to perform user authentication, or collect any user information you want from hotspot users. After the hotspot user attempts to authenticate on the external web server, the web server returns a result that tells the Firebox or XTM device whether to allow the user to use the hotspot.

To specify the type of hotspot:

  1. From the Hotspot Type drop-down list, select the hotspot type.
  2. Complete the configuration settings for the type of hotspot you selected:

See Also

Configure the Hotspot Custom Page

Connect to a Hotspot

See Hotspot Connections

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Knowledge Base