Regular Contributor II

Clearpass Guest and Apple CNA

I have recently deployed a Clearpass Guest and Onboard solution for a customer and they have encountered the standard Apple CNA issues with the iOS 6 devices they are using. I know this topic has been done to death but I have a question which I can't seem to find the answer for whilst searching the community.


If you implement the workarounds for resolving the CNA issues (either by adding as a whitelist or using the landing.php old Amigopod workaround) is this meant to disable the automatic launch of the webpage by the Apple devices?


The customer wants the devices to automatically open a browser window to launch the captive portal and prompt for authentication but this breaks the onboarding process which is linked from the Guest captive portal. As soon as you try and install the profile the Apple device drops the wireless connection. This has been seen on both an iPhone and iPad.


Does anybody have any ideas about getting around this issue?

Many thanks


Re: Clearpass Guest and Apple CNA

Unfortunately because of limitations in apples IOS the only way to do it as of today is to bypass the CNA.
Thank You,

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.

Re: Clearpass Guest and Apple CNA

We are working on a long term solution.  We will keep you updated.


For Guest, the /landing.php method will also be integrated into AOS 6.3 and Instant 3.4 coming very soon to handle differences with iOS7.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
If you found my post helpful, please give kudos
Regular Contributor II

Re: Clearpass Guest and Apple CNA

Thanks Guys. Unfortunately I am going to have to provide bad news to the customer.

New Contributor

Re: Clearpass Guest and Apple CNA



I am facing the same issue, i have configured captive portals for BYOD but iphones are having problem with captive portal pages, when i connect to SSID it take long time to get ip from DHCP once it get the IP the captive portal page pops up and with in second it disappear and phone get disconnected from the network . i did many changes but so far no solution . if any one knows the exact solution please advise . i am going through lots of community forums of Aruba but every one has different story and i have no idea what to do .



Guru Elite

Re: Clearpass Guest and Apple CNA

Your issue has a number of problems, each with a different possible solution:


- Takes long to get DHCP

- Page takes long to come up

- Captive Portal disappears and phone gets disconnected from the network.


Here is what I suggest:


- Do a constant ping to the devices when all of this is happening and see if you are dropping any pings when your problems occur.  That way you can see if it is a connectivity issue FIRST, as opposed to several other things that could be the problem.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
ArubaOS Consolidated Release Notes
Aruba VIA ASE Solution - Configure VIA VPN