Hotels have that already. Drop all traffic except web, then route that to an authentication or EULA page, set cookie, etc.