Wireless Access

On iPad with Wi-Fi and iOS 11 Beta 4, user can connect to Wireless Guest network briefly and then it disappears from the Wi-Fi choices. The captive portal - captive.apple.com does not show up in Safari.

We use Aruba Networks for wireless guest set up.

Has Aruba tested iOS 11 Beta setup?

Thank you,

Tony

Testing against beta software is a challenge because beta software changes all of the time and sometimes manufacturers fix their issues by the time production is released.  I am not sure that we have a policy to fix issues introduced by beta software...  You can try opening a TAC case to see what they say...

Thanks Colin, what's a TAC case?

How do I file one?

Tony

It would be a support case.  

To be honest, Aruba typically waits until a software is GA before attempting to fix anything, because Apple could fix it.  You could certainly report it to Apple if you wanted to.

Hi Colin,

iOS 11 is in GM Seed now, prior to public release on 9/19.  Wi-fi connection still does not stay connected so captive.apple.com does not come up.

Have other enterprise businesses reported this issue?

Thank you,

Tony

Yes, have seen this behaviour for the general iOS11 release on 6.4.4.11 and 6.4.4.14. Will keep you posted.

Hi - Having exaclty the same issue. Since upgrading on ios11 our devices cannot connect to our office networks. It seems ot accept the credential then connects and disconnects in a loop. Hope we can get a resolution asap. Thanks

Yes, others have been reporting this.  

Question(s):

- are you using a public certificate or a private certificate for captive portal?

- Can you just try typing an ip address or non-https web page to bring up the portal?

Not sure if it is public or private. It says the certifcate has expired in August, securelogin.arubanetworks.com issued by GeoTrust DV.

The wifi connection foes up and dwon very quickly so no time to actually even try to connect to any site. 

esieens,

If you have a captive portal certificate that expired in August, you have bigger and more fundamental problems.  I would try replacing that with a public certificate.  Handheld and other manufacturers have become more intolerant of certificates that are untrusted or expired.

https://community.arubanetworks.com/t5/Controller-Based-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Controllers/ta-p/275809

Hi Colin,

We are now testing with iOS 11 full release and find the internal Wi-Fi guest connection does not work with iPads, but OK with iPhones.  We don't know if there may be a glitch with network assistant within iOS 11 or somewhere else.  Every once in a great while, the iPad with iOS 11 can connect with internal guest Wi-Fi.

Thanks

Tony

Please see here:

https://support.apple.com/en-in/HT207828

and here:

https://www.thesslstore.com/blog/crypto-ssl-improvements-high-sierra-ios-11/

It won't let you connect to a certificate that is expired, and "

It seems like the default certificate in ArubaOS uses sha-1, so the answer is to generate a certificate with a 2048 bit length with sha-2 encryption for this to work.

Let me just say that the Aruba internal captive portal was not meant to be used outside of the lab, and the user should replace it with something that fits the security profile of the deployment in production.

Summarizing the solution to this problem is not uploading the devices to IOS 11?

Indeed and our IT is looking into fix it however any device on an older iOS versio can still connect succesfully. Any device on iOS 11 cannot.