Wireless Access

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

Working outside of CNA = problem with CNA.

Not working outside of CNA = configuration incorrect.

Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Your response makes sense. However we need to play by apple's rules when it comes to integrating with their devices. 

The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

Working outside of CNA = problem with CNA.

Not working outside of CNA = configuration incorrect.

Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Your response makes sense. However we need to play by apple's rules when it comes to integrating with their devices. 

The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

Working outside of CNA = problem with CNA.

Not working outside of CNA = configuration incorrect.

Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Any luck with TAC? I have the same issue.

Your response makes sense. However we need to play by apple's rules when it comes to integrating with their devices. 

The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

Working outside of CNA = problem with CNA.

Not working outside of CNA = configuration incorrect.

Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 

Still gathering logs from controller, device, etc. 

I suspect this was caused by an incorrect DNS set by the device, since the controller's domain name record can only be found on the local DNS. I found that not all connected devices face this CNA issue, it was also reported "intermittent" by the device owner. I have yet to come across another device in the network with the same issue. 

Any luck with TAC? I have the same issue.

Your response makes sense. However we need to play by apple's rules when it comes to integrating with their devices. 

The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

Working outside of CNA = problem with CNA.

Not working outside of CNA = configuration incorrect.

Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.

Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 

If the Apple device uses Safari or some other browser, does the page work properly?

MacOS and IOS devices have this issue. 

The devices are getting IPs from DHCP. 

The SSID has a pre authentication role that enforces the internal captive portal. 

Is the captive portal working for other devices?

Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

What does your configuration look like for this SSID?

Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here?