There are correct, I hope and mostly that configuration is working but it happen few times that traffic is not passing in tunnel. IP is assigned and thats all, no traffic is going to tunnel. Strange things is that other SSID that it is tunneled in that time works fine.
On AP i see that kind of error but i don't kow if it mean somthing important:
stm| Unexpected stm (Station management) runtime error at update_sta_flag, 2208, Doesn't send rc_stop_acct_req when captive portal + auth mode
or
Could not add ECP rule: ECP profile 'CaptivePortal' not found
Rafal