Hello,

I have a project using Omada EAP-225 with Software controller.

first of all my project is to allow main LAN (vlan1) and a newly created vlan(vlan21) to have wifi access using many EAP-225 APs which are distributed on all building.

I am using Sophos XG firewall, a trunk uplink from sophos to Aruba instant on Switch, then uplinks from Aruba to HP and cisco switches with trunk ports between all switches to APs

Note that the XG firewall allow me to reach internet with DHCP pools created on it for main LAN and vlan21.

My question is:

I have created 2 SSID (SSID1 for main LAN and SSID2 for vlan21)

I have the SDN controller installed on server at LAN side.

for vlan1 when I turn the portal authentication with vouchers or any other security sign-in I have no issues, but when I apply portal on vlan21 I got connectivity check issue without reaching the portal.

(note I can get DHCP from firewall on 2 vlans and I can connect to internet if I skipped the connectivity check, so all the way connection from firewall to APs is correct and accurate)

My only issue is that I can't reach the portal.

I tried to just make my pc where SDN software installed to be on access port vlan21 then did the same for AP's (access port the uplink connected to AP vlan 21), I then can reach the portal from vlan21.

what I need, is to stay with my pc on main LAN and let the AP port connected to switch as trunk then reaching the portal when connecting toSSID as normal wifi and SSID2 using portal authentication (vlan21).

I am confused I tried much and much over 1 week ago and still can't solve this problem. please help.

thank you.