Security

last person joined: 6 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Captive Network Assistant

Jump to Best Answer
  • 1.  Captive Network Assistant

    Posted Nov 07, 2014 12:05 PM
      |   view attached

    Has anyone noticed that after connecting to a captive portal with an iPhone running IOS 8, there sometimes is a delay with Apples captive network assistant displaying the "Done " option. This delay seems somewhat random but when it happens "Cancel" is the only option then after about 30 seconds "Done" is finally displayed. I know that you can disable CNA on the controllers captive portal configuration but this also preventst the splash page from automatically poping up when connecting. The user must then open a browser to recieve the splash page after it times out several hours later, but if they are trying to use an App, it isn't obvious that they need re-accpet via the splash page. 

     

    Is there a way to setup the splash page so that once accepted it is never displayed again? It seems that the max timeout is about 4 hours or so.

     

    I would greatly appreciate any help with this issue and I have attached an example of the CNA in it's delayed condition.



  • 2.  RE: Captive Network Assistant
    Best Answer

    Posted Nov 08, 2014 03:12 AM
    Unfortunately that is an IOS issue and the only option you have is to either disable CNA or leave it as is.


  • 3.  RE: Captive Network Assistant

    Posted Nov 12, 2014 11:23 AM

    That's what I was affraid of, I will continue to troubleshoot why sometime there is a delay and others times there is not. Thanks



  • 4.  RE: Captive Network Assistant

    Posted Feb 26, 2015 02:10 PM

    You're running into an issue that's addressed at https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1680

    and http://community.arubanetworks.com/t5/Controller-Based-WLANs/What-config-on-Aruba-is-needed-to-Bypass-Apple-Captive-Network/ta-p/170040

    and http://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/7071/1/AppNote_Apple_Captive_Network_Asst_Bypass_with_CPG.pdf

    Unfortunately some of the information in the above seems to be outdated or not directly relevant to Aruba Instant. Or it may prevent the delay (good) but disable a useful Apple feature (bad).