Security

Reply
Regular Contributor II
Posts: 226
Registered: ‎03-03-2011

Clearpass Guest and Apple CNA

I have recently deployed a Clearpass Guest and Onboard solution for a customer and they have encountered the standard Apple CNA issues with the iOS 6 devices they are using. I know this topic has been done to death but I have a question which I can't seem to find the answer for whilst searching the community.

 

If you implement the workarounds for resolving the CNA issues (either by adding .apple.com as a whitelist or using the landing.php old Amigopod workaround) is this meant to disable the automatic launch of the webpage by the Apple devices?

 

The customer wants the devices to automatically open a browser window to launch the captive portal and prompt for authentication but this breaks the onboarding process which is linked from the Guest captive portal. As soon as you try and install the profile the Apple device drops the wireless connection. This has been seen on both an iPhone and iPad.

 

Does anybody have any ideas about getting around this issue?

Many thanks

David
ACDX #98 | ACMP | ACCP
Aruba
Posts: 1,526
Registered: ‎06-12-2012

Re: Clearpass Guest and Apple CNA

Unfortunately because of limitations in apples IOS the only way to do it as of today is to bypass the CNA.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: Clearpass Guest and Apple CNA

[ Edited ]

We are working on a long term solution.  We will keep you updated.

 

For Guest, the /landing.php method will also be integrated into AOS 6.3 and Instant 3.4 coming very soon to handle differences with iOS7.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Regular Contributor II
Posts: 226
Registered: ‎03-03-2011

Re: Clearpass Guest and Apple CNA

Thanks Guys. Unfortunately I am going to have to provide bad news to the customer.

David
ACDX #98 | ACMP | ACCP
New Contributor
Posts: 3
Registered: ‎09-04-2016

Re: Clearpass Guest and Apple CNA

hi,

 

I am facing the same issue, i have configured captive portals for BYOD but iphones are having problem with captive portal pages, when i connect to SSID it take long time to get ip from DHCP once it get the IP the captive portal page pops up and with in second it disappear and phone get disconnected from the network . i did many changes but so far no solution . if any one knows the exact solution please advise . i am going through lots of community forums of Aruba but every one has different story and i have no idea what to do .

 

Regards.

Guru Elite
Posts: 20,009
Registered: ‎03-29-2007

Re: Clearpass Guest and Apple CNA

[ Edited ]

Your issue has a number of problems, each with a different possible solution:

 

- Takes long to get DHCP

- Page takes long to come up

- Captive Portal disappears and phone gets disconnected from the network.

 

Here is what I suggest:

 

- Do a constant ping to the devices when all of this is happening and see if you are dropping any pings when your problems occur.  That way you can see if it is a connectivity issue FIRST, as opposed to several other things that could be the problem.

 

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Search Airheads
Showing results for 
Search instead for 
Did you mean: