I am interested in setting up a captive portal on a wireless network.
From what I understand I would do this by initially having all guests in a temporary vlan, moving them to the real vlan when authenticated or against some other criteria.
What threats should I look out for that people may be able to bypass the captive portal and access the network?
Should attacks against the webserver be my primary point of concern, or are there network level attacks I should look out for as well?
(Mod Edit- for the threats you list, what mitigation scenarios are effective)