Captive portal page not found

[bgkskyguy]

So, I have two interfaces set up as described in the guest network setup.  I have created and uploaded my template.  everything shows up.  I created the rules as described, creating a rule for each interface..  When I plug in a test laptop it simply says page not found when trying to connect on either of the guest interfaces.  Connected another pc with same issue and tried multiple browsers.  config -  wan, LAN-192.168.14.1 - opt1-192.168
.15.1 (for guest), opt2 - 192.168.16.1 (for guest)...  This is a campground with multiple access points thus the two interfaces.  So, with portal and dns forward enabled..  why no redirect to the captive portal page? 
Did a lot of looking in the docs and forums before I posted so I'm not just asking before looking.  If I missed something I'm sorry please be kind, just figuring this out. 

[bgkskyguy]

A little bit to clarify, I have not yet hooked this up.  still on the bench.  I plug a laptop directly into the opt1 (or 2) port.  The laptop gets the correct IP address.  When I try to connect to the internet (any page) I get a "no internet connection error" in my browser.  It is never redirected to the captive portal page.

[bgkskyguy]

Further update........  I found the portal page actually works...it just does not work in chrome.  If I use I.E. it works fine.  odd.

[bartjsmit]

Could that be because Chrome tries http/s by default?

Bart...

[Wayne Train]

Any news on this ?
If i connect to the guest network with firefox 56.0.1 on OPNsense 17.7.5-amd64 I'm not redirected to the captive portal login page if I enter something in the address-bar. Bart mentioned this could be because of https. Is there any way to make the Captive Portal use https ?

And I also have another question:

Is it possible to make the captive portal run on my virtual CARP IP and not on the interface itself ?

Thanks a lot,
Wayne

[franco]

Select a certificate for your captive portal zone...

No, captive portal will listen on the interface and all its VIPs if I'm not mistaken. What you can do is block access to all the IPs you don't want the CP to be accessed via.


Cheers,
Franco