cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
547
Views
0
Helpful
3
Replies

Delay on Apple IOS devices to show connection

johngreen76
Level 1
Level 1
I am experiencing the problem listed below only with IOS devices when the WLC interface is routed through a firewall. If traffic is bypassed the firewall the IOS device connects instantly. I have tried testing with Fortigate, pfSense, and untangle firewalls and all exhibit the same issue.
Does anyone have some experience with this issue? Android, PC, and Macbook devices connect without problems. I have tried different WLC firmware ranging from 7.4 - 8.1 and nothing changes. 

CSCur63456

Description

Symptom:
iOS apple device doing webauth auth may take up to 30 seconds to move to the "Done" status after submitting the form
it shows the working/waiting status, then moves to pass traffic

this is triggered by a timing issue between the captive portal code in the IOS device , plust traffic drops at FW due to lack of TCP state

Conditions:

-Webauth
-Captive portal detection disabled
-FW that will drop unexpected traffic, instead of sending TCP RST

Workaround:

Several possibilities
1. Allow stateless traffic form clients or configure FW to reset it
2. use captive portal detection
3 Replies 3

Philip D'Ath
VIP Alumni
VIP Alumni

What does the firewall log as going wrong when this happens?

It shows traffic to various apple domains, and some TCP re transmissions. I am assuming this is an issue within IOS since every other device can associate and authenticate properly.

I know its painful.  Every now and again Apple change it and break it again.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: