Captive Portal with Cisco Aironet 1130 wireless auth help

[MikeC]

Hello,

I have searched through the forums was not finding quite what I was looking for and was hoping for some help.

I have a Cisco Aironet 1130 that has three SSIDs on it and a VLAN for each.

SSID1 - VLAN 10 - Local users pcs access with auth from MS ISA via cert.
SSID2 - VLAN 20 - Local users for phones, etc… with WPA2
SSID2 - VLAN 30 - Guests - pfsense Captive Portal.

I am trying to determine the best way to setup the third SSID on the wireless with some base level encryption so the connection is partially secure, but does not require a password to access.  Is this possible?  Or do I need to configure the third SSID to be open?

I am basically trying to set up a situation where a guest can visit access the wireless make the SSID connection, get a dhcp address from the captive portal, and then be redirected to a login page where they will use a generated password to access the internet.

With a wired connection, everything works, I am just trying to configure the wireless aspect.

Suggestions or questions of clarification welcome.

Thank you all for any assistance you can provide (and a great product)!

Mike