Andrew Tillman wrote:
> NAT is turned off.
> 
> Both IPs are on the same subnet because of the existing internal 
> network. If I just unhook the WAN will captive portal still work if 
> monowall is plugged into the switch?

That is the point.  The CP works through the routed interface.  You need 
routing.  So you need a second subnet, and a static route on your 
hardware firewall to the internal subnet with a next hop of the WAN 
interface.

			Lee