Security

Reply
Regular Contributor I

Redirect issue

I currently have a single click SSID with ToS acceptance setup and working with guest mac auth and caching.  It seems all browsers are working except Safari.  Safari says it cannot create a secure connection to securelogin.arubanetworks.com.  I had thought this was happening because of the cert so I exported the cert and installed it on the device with Safari but that did not correct the issue.  I'm still getting the same error.  Any suggestions?

Guru Elite

Re: Redirect issue

Can you please post a screenshot?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I

Re: Redirect issue

A screenshot of the safari browser?





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.
Guru Elite

Re: Redirect issue

Can the device ping securelogin.arubanetworks.com?  What ip address does it resolve to?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I

Re: Redirect issue

Colin,

I havent tried that but the redirect works fine from the same device (iphone) using the chrome browser. What I have noticed is that when I accept the TOS the first time Safari sends the MAC as the username instead of the randomly generated username set in the web login page. Because of this it hits my mac auth service and fails because the device isnt in the endpoint or insight databases yet.

Thanks





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.
Guru Elite

Re: Redirect issue

Msales,

There may be too many places that this could break. You have custom code, Mac authentication, clearpass services, an iPhone with little diagnostics... Where do we even start?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I

Re: Redirect issue

This is not custom code. I have a guest web login set to do anonymous login using the generate random account option. The cppm services were created using the guest mac auth template. This process works in IE and chrome just not safari. What diagnostic info would you like?

Thanks





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.
Guru Elite

Re: Redirect issue

It sounds like the device is disconnecting before the terms are accepted which explains the MAC auth. Are you getting the captive network assistant or the actual safari browser?


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I

Re: Redirect issue

Not getting the CNA. This is in safari. I believe the role is setup so that the CNA should not pop up.

Thanks

Matt Sales
Network Engineer II
Centra Health
434-200-5574





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.
Regular Contributor I

Re: Redirect issue

After further research it appears this has to do with iOS version.  On devices with 8.x after accepting the TOS it does not redirect to the originally requested page.  I receive an error in safari that it couldn't create a secure connection to the server and have securelogin.arubanetworks.com in the URL bar.

 

On a device running 7.x behavior is as expected with Safari taking me to the originally requsted pages after accepting the TOS.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: