Andrew Tillman wrote:
> NAT is turned off.
> Both IPs are on the same subnet because of the existing internal
> network. If I just unhook the WAN will captive portal still work if
> monowall is plugged into the switch?
That is the point. The CP works through the routed interface. You need
routing. So you need a second subnet, and a static route on your
hardware firewall to the internal subnet with a next hop of the WAN