Configure an SMS gateway

1. Go to Authentication > Guest user settings, scroll to SMS gateway, and click Add.
2. Enter a name.

3. Specify the settings.

   Option	Description
   URL	URL of the SMS gateway for sending an SMS request.
   HTTP method	Method for sending an SMS request to the SMS gateway. Select Get to request data from a specified resource. Select Post to submit data to be processed by a specified resource.
   Cell number format	Use country code with mobile phone number.
   Number prefix	Prefix to use with the mobile phone number. Can include alpha-numeric and ASCII special characters.

4. Enter request parameters specified by your service provider.

   Here's an example:

   If http://www.example.com/sms.aspx?user=joey&pass=joey123&mbno=9792234567&msg=Test is the request URL, the request parameters must be as follows:

   Name	Value
   user	joey
   pass	joey123
   mbno	9792234567
   msg	Test

5. Enter the response format specified by your service provider.

   Here's an example:

   If status=302&message=Limit Exceeded is the response received, the response format must be as follows:

   status={0}&message={1}

6. Enter the response parameter specified by your service provider.

   Here's an example:

   If status={0}&message={1} is the response format, the response parameters must be as follows:

   Parameter index	Name
   0	status
   1	message

7. Click Save.

Click Test connection and type a mobile phone number. If you can connect to the gateway, you will receive an SMS message.

Control password parameters on the firewall

1. Go to Authentication > Guest user settings > Guest user general settings.

2. Configure the settings. See Guest user general settings.

   

3. Click Apply.

Turn on authentication with the newly created SMS gateway

1. Go to Authentication > Guest user settings > Guest user registration settings.
2. Select Enable guest users registration.

3. Configure the registration settings. See Guest user registration settings

   

4. Click Apply.

Configure firewall rules

Configure a rule to allow Wi-Fi users access to DNS traffic.

1. Go to Rules and policies > Firewall Rules.
2. Click Add firewall rule and select New firewall rule.
3. Specify the rule name and position.

4. Configure the following settings:

   Setting	Value
   Action	Accept
   Source zones	WiFi
   Source networks and devices	Any
   Destination zones	WAN
   Destination networks	Any
   Services	DNS

5. Click Save.

Configure a rule to apply the user-based policy and redirect unauthenticated users to the captive portal.

1. Go to Rules and policies > Firewall Rules.
2. Click Add firewall rule and select New firewall rule.
3. Specify the rule name and position.

4. Configure the following settings:

   Setting	Value
   Action	Accept
   Source zones	WiFi
   Source networks and devices	Any
   Destination zones	WAN
   Destination networks	Any
   Services	Any

5. Select Match known users.

6. Select Show captive portal to unknown users.
7. Click Save.

Test scenario

A user connects to the Wi-Fi network.

1. The following page is shown.

   

2. Click Register for internet access.

3. Enter the requested information.

   

4. Click Save.

5. If the registration is successful, the sign-in page is shown.

   

6. The user will receive an SMS message containing the username and password.

   

7. Users can now use the credentials received through SMS to sign in to the Wi-Fi network.

   

8. After successful login, the following page is shown.

   

9. The user appears in the Current activities > Live users and Authentication > Guest users sections of the Sophos Firewall. Reporting data is also available.

   

   

More resources

• Messages