Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?





Hierarchy Level

Release Information

Statement introduced in Junos OS Release 20.4R1 for SRX Series devices.


Configure access point captive portal settings on SRX Series devices.

The Captive Portal (CP) feature is implemented on Wireless access point (WAP) mPIM card. Junos provides integrated guest access management with WAP mPIM card. The captive portal feature allows user to access the verified network users but not wireless users. You can configure independently with different verification methods such as Virtual Access Point (VAP) or SSID. There are two captive portal instances where each CP instance is set of instance parameters that are associated with one or more VAPs. Thus, different instances are configured to respond differently to users to access the associated VAP.

The captive portal instance settings apply to users who attempts to authenticate on the VAP. You can associate a captive portal to an SSID. To authenticate page displays, user initiates access to a VAP that is associated with a captive portal instance. You can create and customize the authentication page. You can configure a captive portal instance to access both guest users and authorized users. Authorized users are assigned to a CP instance with a different VAP than guest users whereas failed authenticated user page lists the users that attempted to authenticate on a captive portal and failed.


idle-timeoutSpecify the idle timeout (seconds)

Default: 180

session-timeoutSpecify the session timeout (seconds)

Default: 300

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

routing—To view this statement in the configuration.

routing–control—To add this statement to the configuration.

system—To view this statement in the configuration.

system–control—To add this statement to the configuration.