Wireless Access

last person joined: 18 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Post iOS 11 upgrade web redirection is badly degraded

This thread has been viewed 0 times

  • 1.  Post iOS 11 upgrade web redirection is badly degraded

    Posted Sep 26, 2017 03:53 AM

    Hi,

     

    Post upgrade to iOS 11, this has been observed with many users that while connecting to Enterprise guest wireless network it takes around 2 mins for web redirection for web auth.

    Can see in the captures taken on Cisco WLC (5508, ver 8.2.141) the redirection is being sent immediately to endpoint however web auth portal doesnt pops up automatically. On further debug, could see on couple of endpoints ( iphone 6 or 6s) tries to reach to www.apple.com 7 times before failing over  to captive.apple.com, Web redirection doesnt work until failover to captive.apple.com happens. Whereas at the same time other endpoints ( iphone 6, 6s,5s,5c) running with same version i.e iOS11 tries to reach captive.apple.com at the first instance and automatic web redirection works perfectly fine.

     

    Please note it was working fine when all the users were running with iOS 10. And Endpoints always used to go to captive.apple.com

     

    No changes are done on wireless infrastructure.

     

    Componenets Used:

    WLC - Cisco 5508 (ver 8.2.141)

    Radius - CPPM (ver 6.6.7)
     

    Note - Android users are not facing any such issue.

    Is anybody else have gone through such issue or observation and can help if any resolution is found ?

    Thanks in advance
    Nitish



  • 2.  RE: Post iOS 11 upgrade web redirection is badly degraded

    EMPLOYEE
    Posted Sep 26, 2017 04:06 AM

    Please check to make sure that your Captive Portal Server Certificate is using Sha-2 certificates and your key size on that certificate is 2048 bits.  https://support.apple.com/en-in/HT207828

     

     



  • 3.  RE: Post iOS 11 upgrade web redirection is badly degraded

    Posted Sep 26, 2017 04:14 AM

    Thanks for the reply Colin, it has been already validated and in place.

     

    Thanks

    Nitish



  • 4.  RE: Post iOS 11 upgrade web redirection is badly degraded

    EMPLOYEE
    Posted Sep 26, 2017 04:26 AM

    Do you have a case open with Cisco TAC?