topic Re: ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2 in Network Access Control

ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

Akim24836987 — Fri, 21 Feb 2020 18:51:30 GMT

Good Day
We have:
ISE 2.3.0.298

WLC 2504
Ipad 11.2.6

When authorizing and redirect to the BOYD, the portal displays the message: "Your browser is currently unsupported".

In the authorization logs you can see that the profile is indicated by Apple-Device
Something similar was with the previous version, how can I eliminate it in this one?

Re: ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

paul46 — Fri, 23 Mar 2018 04:52:29 GMT

Plz elaborate more on issue and post your RADIUS logs

What troubleshooting has been done so far at your end?

Re: ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

Akim24836987 — Fri, 23 Mar 2018 05:31:23 GMT

I created authentication profiles:

Name: BYOD-SUPP

Check the box for Web Redirection and from the drop-down, choose Native Supplicant Provisioning. In the ACL section, type in GUEST-REDIRECT. In the Value field, choose BYOD Portal (default)

Name: BYOD-REG
Conditions: NetworkAccess:EapAuthentication equals EAP-TLS
Endpoints: BYODRegistration equals Yes

ACL GUEST-REDIRECT:
Permit requests to the dns servers
Permit requests to the dhcp servers
Permit requests to the ISE servers
Deny any

ACL WLAN-PERMIT-ALL:
Permit ip any any

Then I created policy:

Name: BYOD-SUPP
Conditions: AD1:ExternalGroups equals BYOD-Use
Profiles: BYOD-SUPP

Name: BYOD-REG
Conditions: BYOD-REG
Profiles: WLAN-PERMIT-ALL

RADIUS Livelog in the attachment

Re: ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

Akim24836987 — Fri, 23 Mar 2018 05:49:04 GMT

detailed log of the latest two events

Re: ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

Akim24836987 — Fri, 23 Mar 2018 05:49:21 GMT

detailed log of the latest two events