IOS 7 Captive Portal Issues

  • 1
  • Question
  • Updated 4 years ago
  • Answered
IOS 7 phones are having issues connecting to the wifi here. I understand the phones now have a slightly different captive portal network assistant which is causing issues on other vendors to. We're seeing users struggling to connect easily as it just constantly reloads the portal page once they've authenticated and other times it just shows up as a blank page so they can't authenticate. This doesn't happen on any other devices within out network. The following forum outlines the problem better but I was wondering if any one else is experiencing similar issues to the above and in this forum: http://forum.daviddarts.com/read.php?...

Any help would be greatly appreciated.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 1
Photo of thewifigeek

thewifigeek, Champ

  • 86 Posts
  • 12 Reply Likes
I haven't experienced any issues with iOS7 on Aerohive. My preferred guest auth is PPSK+CWP.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Ok great, are problem is not related to guest manager though (that i know of). Interesting that yours works fine though. I'll have another dig about and see what i find. Thanks
Photo of Crowdie

Crowdie, Champ

  • 972 Posts
  • 272 Reply Likes
Cisco has released firmware updates and a workaround (for people who don't want to/can't do a firmware update) to resolve the issue with iOS 7 devices and captive portals. For your interest the workaround is to allow traffic to the www.appleiphonecell.com and captive.apple.com FQDNs.

I agree with geekonastick that PPSK+CWP is a preferred option to captive portals. My logic is that captive portals are not encrypted at layer two so are highly susceptible to man in the middle attacks. My personal view is that the only time open authentication (i.e. no encryption) should be utilised is with 802.1X.
Photo of thewifigeek

thewifigeek, Champ

  • 86 Posts
  • 12 Reply Likes
What's the Cisco recommended WLC version to resolve iOS7 redirection issue? I suspect there are view more URLs than the two you mention however I haven't tested whitelist-only approach. Yes yes I know it's the not the right forum.. it's in context of this thread.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Although we have a cisco infrastructure here, it doesn't really solve the iphone/ipad issue. Please note this isn't for guest manager, it's used for employees who bring their own devices in and need access to the internet so it's a legitimate wireless network within our corporation.

How would you whitelist the addresses as i see no feature in the captive portal that allows you to do that? We use wpa2 personal for that particular network which authenticates against our radius server. I can't find a way to allow devices access to those pages before they've authenticated. I've hit a massive mind block here.

Thanks for your help so far :)
Photo of thewifigeek

thewifigeek, Champ

  • 86 Posts
  • 12 Reply Likes
Oliver, are we talking Cisco or Aerohive here?

Anything Cisco we should address is Cisco forum, please send me your reference link and I can continue comms there.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Aerohive issue :)
Photo of shoremedia

shoremedia

  • 22 Posts
  • 4 Reply Likes
Experiencing the same problem with our Aerohive CWP and iOS7 devices in my organization.
Documented here: http://stackoverflow.com/questions/18...
Also documented here:
http://blog.erratasec.com/2010/09/app...

Is this Aerohive CWP operation something that can be fixed from Aerohoive?
We just need CWP to play nicely and return the "success Message" for iOS7 devices. Users can hit the “Cancel” button in the upper right of the iOS7 mini-browser that apple loads when connecting to CWP....but that is a pain for users to cancel, and then re-load a browser. Other CWP based vendors/solutions have released patches, so it seems like a fixable issue.
Photo of thewifigeek

thewifigeek, Champ

  • 86 Posts
  • 12 Reply Likes
Have a look at your User Profile Application Sequence under your Guest+CWP SSID. I set mine to MAC > CWP > SSID and it works a treat.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Gonna give that a go as thats the exact same problem that what we're having here. Thanks for the tip will let you know.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Where do i find that setting in hive manager? Sorry, struggling to find it.
Photo of thewifigeek

thewifigeek, Champ

  • 86 Posts
  • 12 Reply Likes
Configure > Select "GUEST SSID + CWP" > Middle to bottom of that screen
Photo of Crowdie

Crowdie, Champ

  • 972 Posts
  • 272 Reply Likes
As a side note this is certainly not the first time Apple has made major changes to iOS without an appropriate level of advice. A number of people who remember the pain after Apple changed the Bonjour system in iOS; but kept Bonjour the same in OSX which was a little strange; and how long it took all vendors to get Bonjour working on iOS again.
Photo of Oliver Eve

Oliver Eve

  • 7 Posts
  • 0 Reply Likes
Yeah it is never a fun task.
Photo of Ryan Powell

Ryan Powell

  • 17 Posts
  • 3 Reply Likes
Hi all,
Please see my reply ont he following for a woraround for this issue with iOS 7 devices and a CWP:
https://community.aerohive.com/aerohive/topics/ios_devices_cwp_not_auto_closing#reply_14334229

Regards,
Ryan