Walled Garden 域名验证器

为 Cisco Meraki、Ubiquiti UniFi 及其他无线硬件控制器生成认证前白名单。

1. Choose your integrations

Apple CNA bypassAllows iOS and macOS devices to auto-detect internet access without opening the Captive Network Assistant browser overlay.

Google AuthenticationRequired for guest login using Google accounts, Gmail verification, or Google Workspace SSO.

Facebook AuthenticationRequired for guest login using Facebook accounts or capturing profile data.

Stripe paymentsEnables pre-authentication credit card and Apple Pay processing for paid WiFi tiers.

PayPal paymentsEnables PayPal payments for paid WiFi access tiers.

Google FontsRequired if your splash design calls external Google Fonts styles.

AWS S3 and Cloudfront CDNRequired if your custom assets, logo, or background images are hosted on Amazon S3 or Cloudfront.

2. Select your hardware controller

Generated rules (14 domains)

*.apple-dns.net
*.apple.com
*.captive.apple.com
*.fonts.googleapis.com
*.fonts.gstatic.com
*.gsp1.apple.com
*.onboarding.purple.ai
*.purple.ai
*.www.apple-dns.net
*.www.apple.com
*.www.purple.ai

Important notes about Apple CNA bypass

Whitelisting Apple domains prevents the captive network browser from popping up automatically. While this creates a seamless login experience for repeat users, it requires guests to open a browser manually to see the splash page on their first connection. If you want to force the login screen to display immediately on connect, do not whitelist the Apple CNA domains.

即时配置 Walled Garden 访问列表

在设置强制门户时，访客网络需要在认证前将第三方服务（如 Apple CNA、Google Fonts、Facebook 或支付网关）加入白名单。选择您的集成和控制器类型，即可生成完整的、可直接复制粘贴的规则。

支持的集成与平台

适用于 Cisco Meraki、UniFi、Cisco Catalyst 9800 和 Aruba Central 的直接配置格式。
涵盖社交登录、外部字体、支付处理器以及 Apple CNA 绕过域名。
防 SSRF 的 DNS 解析和 IP 地址查询。

Need Enterprise Assistance?

Deploying secure guest networks at scale across dozens of sites requires precise controller configurations. Speak to our team for custom network engineering plans.

Contact Our Engineers