If you are captive, the network can do pretty much anything it wants with your connection attempts.
So if you choose to go to http://20.20.20.20http://20.20.20.20/, the gateway can respond to those requests itself with a simple http redirect to the login page.
The gateway is not obliged to forward packets to IP addresses beyond itself.