Let's say we have wep set to optional. Is there any way to have all the users that are not using it routed to 1 specific SSL'd page? Walled garden can't do SSL, yet I did find a thread covering that. I don't know how well hotspot will work if I have wep turned on. Any ideas? I don't want to use hotspot auth.

i am currently investigating the same question. I want anyone that just picks up our signal to hit a portal page...maybe even run through the radius and allow them to sign up...

But i dont want everyone to have to log in namely my clients that are fixed wireless monthly subscribers.. any ideas?

Try using webserver on some of your pc's (example 192.168.1.100),
then in MT dst-nat use this:

add src-address=0.0.0.0/0 action=nat to-dst-address=192.168.1.100
to-dst-port=80

The others that can use your service should go in front of this rule.
All others will be redirected to index.html of your 192.168.1.100 webserver.
Maybe this would help?
Cheers...