[rbak-nsp] Captive portal for Ethernet users

[John]

Hi,

I need to setup a captive portal for several hundred users that will be 
connected to the SmartEdge via an Ethernet connection (each user is a 
separate port on a Cisco switch), I'd be grateful for any pointers on 
what is needed to implement this?

Am I right in thinking this is what CLIPs is for?  Do I configure the SE 
with CLIPs and DHCP, and then when the client has been allocated an IP 
we will have a CLIP's session, which we then redirect to a captive 
portal that would allow them to authenticate and then somehow update the 
SE forwarding policy to allow outbound access?

If the switches used a single VLAN then what about security between 
users?  If we had a separate VLAN for every user/port then that would be 
a huge amount of config on the SE if we end up with thousands of users?

Any advice & guidance appreciated.

John.