Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

No Captive Portal redirect on iPhones only

This thread has been viewed 22 times

  • 1.  No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 05:24 AM

    Hi,

    We have Aruba IAP solution managed by central using clearpass for guest portal.

    Clearpass has a specific https cert and VAP has a wildcard cert.

    Guest captive portal redirect and login works on windows10, ubuntu, MAC osx and Andriod. but simply doesn't work on any iPhone. tried different versions.

    Tried with CNA on and off but no luck.

    Even manually entering captive portal page URL didn't work.

    Has anyone come across this issue? 



  • 2.  RE: No Captive Portal redirect on iPhones only

    MVP EXPERT
    Posted Jun 16, 2020 06:55 AM

    Is the certificate in use on the IAP/CPPM trusted by the Trust List on your iOS device?

     

    https://support.apple.com/en-gb/HT204132



  • 3.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:12 AM

    I experienced this same issue. It came down to not having an IP address configured on the SVI. The iPhone tried to reach out to the internet and couldn't.



  • 4.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:27 AM

    Thanks Justin. You mean on virtual controller? Can you elaborate a bit more please? 



  • 5.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:29 AM

    Thanks Craig.

     

    It is standard DigiCert Inc cert. checked the link. it is in trust list.



  • 6.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:45 AM
    Have you tried enabling AirPlane mode to make sure the device is only connected to wifi?

    Also can you share your guest logon user role ACLs ?

    Sent from Mail for Windows 10


  • 7.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:54 AM

    Hi Victor,

     

    One of the phone we were testing has no SIM. definitely only on wi-fi.

     

    Here are guest-redirect rules:

    Enjoybullife_0-1592311998383.png

    Thanks,

    Pavan.



  • 8.  RE: No Captive Portal redirect on iPhones only
    Best Answer

    Posted Jun 16, 2020 01:41 PM

    Upgrade of firmware to latest resolved the issue.

     



  • 9.  RE: No Captive Portal redirect on iPhones only

    Posted Jun 16, 2020 08:56 AM

    Guest-logon is allow all at the moment.