What worked for me was changing the management vlan to your VLAN association for the subnet. in Switching, Configuaration, Switch Settings, VLAN configuration.
... View more
I believe the proper way to do this would be to put a splash page login on the SSID, and give your allowed clients a policy that allows them to bypass the splash page.
... View more