- Configure the WLAN service to firewall friendly mode
Within the WLAN service properties for FF mode, the following entries are mandatory or the AP will drop packets
From the manual:
The Identity and Shared Secret fields are required and must match the values used when you configured the captive portal.
When configuring the Allow policy for the ECP, The IP/subnet value specified on the Filter Rule Definition dialog, must match the Redirection URL value specified on the FFECP