Wireless Access

Reply
New Contributor

Post iOS 11 upgrade web redirection is badly degraded

Hi,

 

Post upgrade to iOS 11, this has been observed with many users that while connecting to Enterprise guest wireless network it takes around 2 mins for web redirection for web auth.

Can see in the captures taken on Cisco WLC (5508, ver 8.2.141) the redirection is being sent immediately to endpoint however web auth portal doesnt pops up automatically. On further debug, could see on couple of endpoints ( iphone 6 or 6s) tries to reach to www.apple.com 7 times before failing over  to captive.apple.com, Web redirection doesnt work until failover to captive.apple.com happens. Whereas at the same time other endpoints ( iphone 6, 6s,5s,5c) running with same version i.e iOS11 tries to reach captive.apple.com at the first instance and automatic web redirection works perfectly fine.

 

Please note it was working fine when all the users were running with iOS 10. And Endpoints always used to go to captive.apple.com

 

No changes are done on wireless infrastructure.

 

Componenets Used:

WLC - Cisco 5508 (ver 8.2.141)

Radius - CPPM (ver 6.6.7)
 

Note - Android users are not facing any such issue.

Is anybody else have gone through such issue or observation and can help if any resolution is found ?

Thanks in advance
Nitish

Guru Elite

Re: Post iOS 11 upgrade web redirection is badly degraded

Please check to make sure that your Captive Portal Server Certificate is using Sha-2 certificates and your key size on that certificate is 2048 bits.  https://support.apple.com/en-in/HT207828

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Post iOS 11 upgrade web redirection is badly degraded

Thanks for the reply Colin, it has been already validated and in place.

 

Thanks

Nitish

Guru Elite

Re: Post iOS 11 upgrade web redirection is badly degraded

Do you have a case open with Cisco TAC?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: