What happens when Guest portal enabled with VLAN
When guest portal is enabled, the controller acts as a portal server and the guests will be redirected to http://unifi_ip:unifi_http_portal_port/guest/. This is where the issues may arise – guest is on vlan3, bridged to DMZ, there’s no way it can reach unifi_ip:unifi_http_portal_port.
In the scenario above, one solution to the problem is to add rules to your router
1. add route for traffic from DMZ->unifi_ip
2. allow DMZ->unifi_ip:unifi_http_portal_port