Security

last person joined: 18 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

No Captive Portal redirect on iPhones only

Jump to Best Answer
  • 1.  No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 05:24 AM

    Hi,

    We have Aruba IAP solution managed by central using clearpass for guest portal.

    Clearpass has a specific https cert and VAP has a wildcard cert.

    Guest captive portal redirect and login works on windows10, ubuntu, MAC osx and Andriod. but simply doesn't work on any iPhone. tried different versions.

    Tried with CNA on and off but no luck.

    Even manually entering captive portal page URL didn't work.

    Has anyone come across this issue? 



  • 2.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 06:55 AM

    Is the certificate in use on the IAP/CPPM trusted by the Trust List on your iOS device?

     

    https://support.apple.com/en-gb/HT204132



  • 3.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:12 AM

    I experienced this same issue. It came down to not having an IP address configured on the SVI. The iPhone tried to reach out to the internet and couldn't.



  • 4.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:27 AM

    Thanks Justin. You mean on virtual controller? Can you elaborate a bit more please? 



  • 5.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:29 AM

    Thanks Craig.

     

    It is standard DigiCert Inc cert. checked the link. it is in trust list.



  • 6.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:45 AM
    Have you tried enabling AirPlane mode to make sure the device is only connected to wifi?

    Also can you share your guest logon user role ACLs ?

    Sent from Mail for Windows 10


  • 7.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:54 AM

    Hi Victor,

     

    One of the phone we were testing has no SIM. definitely only on wi-fi.

     

    Here are guest-redirect rules:

    Enjoybullife_0-1592311998383.png

    Thanks,

    Pavan.



  • 8.  RE: No Captive Portal redirect on iPhones only
    Best Answer

    Posted Jun 16, 2020 01:41 PM

    Upgrade of firmware to latest resolved the issue.

     



  • 9.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:56 AM

    Guest-logon is allow all at the moment.