iPhones does not redirect to ISE Guest portal

[aps1337]

Hi!

I have a problem with a guest network I'm troubleshooting.

It seems to work just fine on just about every device except iOS-devices. On iOS devices the portal doesn't pop up automatically and it refuses to get redirected to the portal if you try to navigate to a page with https (most websites today). If you manually type in a http-adress it gets redirected to the portal.

The captive guest portal runs on ISE version 2.1.0.474 with a 5508 WLC version 8.2.151.0.

"config network web-auth captive-bypass enable" is enabled on the WLC.

Any ideas on how to make the iOS devices get redirected to the portal from https pages too?

[vagner.araujo]

I'm following some TAC isntructions but its not working yet.

Any ideas?

Please try to disable/enable captive-portal bypass via CLI:

config network web-auth captive-bypass {enable | disable}

and test if with it will be working.

After this change you need to reload WLC.

Here is more information:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116041-solution-apple-osx-00.html

If this will not help please try to adjust below WLC settings:

Enable to following configurations via the CLI/GUI:

CLI:config custom-web logout-popup disable

CLI:config network web-auth secureweb disable (***Only if the Apple Device does not use Safari***)

GUI: Enable Fast SSID Change

Disable the following configurations via the GUI:

Exclusionlist Timeout............................ 60 seconds

Session Timeout.................................. 1800 seconds

DHCP Address Assignment Required................. Enabled

CCX - AironetIe Support.......................... Enabled

and try the one below as well:

Management – HTTP-HTTPS - HTTPS Redirection: Enabled

[ammahend]

whats the log on ISE ? are you getting a redirect authorization policy ?