So I understand that captive portal is available. What is baffling me is I cannot find anything that would explain what the actual capabilities of this are. If i were to implement this type of guest access setup inside say a grocery store how can I keep the Guest traffic from being on the same network as say the POS or any internal network device. I have set up a captive portal in a lab environment. The issue is that it is still handing me an IP address out of my typical scope which makes me feel that I may need to assign it a different subnet and route it through my firewall but I am curious as to whether or not this is what needs to be done or if there is some kind of configuration I am missing.