Captive Portal

I have my MW on 10.4.66.x subnet.
I have a web site on the 10.4.10.x subnet.
I have everything configured with static routes so that with captive portal off I can access the 10.4.10.x network and everything works great.

I turn CP on and I can not ping the 10.4.10.x network at all EVEN after I log in and EVEN if I put an Allowed IP Address in the CP Allow List.

If I turn CP off, ping the Allowed IP on the 10.4.10.x network and then turn CP back on, everything works great... what's going on?

Oh Yeah, MW can ping the 10.4.10.x network all the time reguardless of CP.

So nobody know eh?
 

I might be able to help, give me a run down diagram (text based will be fine) of your network setup.

I take it 10.4.66.X is the LAN?

What is the 10.4.10.X range or how is it physically connected to your network?

We actually restructured our layout to make it work.

Basically we are using two monowalls. One that sits inside that does captive portal and DHCP for our wireless, and one that hosts a seperate internet connection.

We needed to allow access to our intranet web server inside but not anything else. To make a long story short, a lot of configuration and routing via VLANs.

Thanks for you willingness to help.
-JC