Security

Hello,

I am not sure if this is an Apple issue or if there is anythign we can do on the Aruba end.  But when our Apple devices connect to our new Aruba Wireless setup (verison 8.3.0.3) the device is re-directed to a portal page and hten a success page, plese see the attached screen shot, for an example.

The actual look is 100 times smaller.  Is tehre a way to make the text larger?  I was infoemd that this success page did not comeup so small with our older wireless system.

Might be related to this. That Success message is very likely coming from http://captive.apple.com. It has nothing to do with the authentication, and devices are supposed to close the captive network pop-up but apparently don't do that all the times. Nor you can change the formatting or font sizes as the page resides at Apple.

OK 2 questions:

1.  I see in the L3 Authenticaiton --> Captive portal Profile, there is an option: "Bypass Apple Captive Network Assistant:"

      a.  See attaached picture.

      b.  Iwill that remove the 

2.  From the page you recommended:  https://community.arubanetworks.com/t5/Wireless-Access/iOS-showing-quot-Success-quot-after-connecting-in-stead-of-going/td-p/298523

"Force default destination for all clients" set enabled, it works as expected, and the "Success" page is not shown.

That might do the exact same thing.  Where is that option to set enabled.  Or is option #1 the only thing available?

If you are using ClearPass, you can configure that in the Web Login or for Self-Registration in the NAS Settings:

For Aruba controller it can be configured in the L3 Authentication Captive Portal profile under 'Redirect URL'; this setting overrides what ClearPass might be configured to. So either use ClearPass or do it on the controller.

For Instant the Redirect URL is part of the captive portal configuration.

By default, the original URL is recorded so if people manually enter a site in their browser that after authentication they end up on that site. In practice, the operating system will detect if there is a captive portal most of the times before a user has an opportunity to even enter a web site URL, in which case redirecting to your own (or a different) website makes sense.

Hello We are not using clearpass as of yet.

What about the option to 'Bypass Apple Captive Network Assistant'.  Will that solve the problem of the small screen by not bringing i up or using it?

 I may try that and see what happends.  Has anyone tried that option?

If you don't have ClearPass:

For Aruba controller it can be configured in the L3 Authentication Captive Portal profile under 'Redirect URL'; this setting overrides what ClearPass might be configured to. So either use ClearPass or do it on the controller.

For Instant the Redirect URL is part of the captive portal configuration.

The Bypass Apple Captive Network Assitant (CNA) will 'spoof' the Success message which prevents the CNA screen to pop up at all. CNA Bypass is a feature used in Onboarding, where you need to be in a full browser instead of the limited CNA browser.