Aironet 1140 FLEXCONNECT External Web Authentication and Apple Devices

[Sandro Galletti]

Hi!

I'm having an issue with this Access Point.

I've configured this access point with WLC in mode FlexConnect with web authentication.

It's all right, i'm connecting with my PC in wireless, i open my web browser in windows, then the Access Point redirect me to External Web Authentication Page,

i put my credentials, and  i'm redirected to my access point ( https:/1.1.1.1/login.html i accept the certificate) and then the Access Point redirect me to Internet.

I do this with my android phone, it's all right again.

I try to connect with iphone or ipad , i'm  redirected to External Web Authentication Page, i put my credentials, and i'm  redirected to https://1.1.1.1/login.html where the web browser don't ask me anything and i'm not redirected to Internet.

Have you any idea?

[Scott Fella]

Well that is how the apple devices work. It opens up a small window where you login. After that you will see a success page and the you have to open up a browser on your own. You can disable the apple devices from opening up the small window, but the user then has to manually open a browser. Apple devices have the built in feature that detects if there is internet and then either opens the window for you to login or not.

http://www.cisco.com/en/US/docs/wireless/controller/7.4/configuration/guides/wlan/config_wlan_chapter_010001.html

https://supportforums.cisco.com/docs/DOC-36523

Sent from Cisco Technical Support iPhone App

[Sandro Galletti]

Thx you Scott, i understand what are you talking about, but my problem is different.

I try to explain..

I see the wireless network, i associate the iphone to this network, so i'm  redirected to Login page,

as i use the "Apple Login" or i Open a Web Page .

In this page , that i reach with all devices i put my credentials, then i will be redirected with all devices

back to Access Point (https://1.1.1.1/login.html).

In this page i should be   redirected to internet after Radius Authentication, but with Apple Devices this doesn't work.

This is thw WEB AUTHENTICATION from Cisco Documents.

The user associates to the web authentication SSID.

The user opens their browser.

The WLC redirects to the guest portal (such as ISE or NGS) as soon as a URL is entered.

The user authenticates on the portal.

The guest portal redirects back to the WLC with the credentials entered.

The WLC authenticates the guest user via RADIUS.

The WLC redirects back to the original URL.

[Scott Fella]

Okay, so the user gets the portal page and enters the information.  You then can see from the radius that the client is authenticated successfully (what are you using? ISE or NGS).  If the radius successfully authenticates the user, then you should get the home page or the url that was initially used on the browser.  You don't mention what code your running on the WLC as that might have some issue which TAC might help you find if that's a bug or not.  I have ran into that issue with v7.2 or v7.3, but I can't remember.... it was a bug, but the WLC was hosting the guest portal.  You have the guest portal on ISE or NGS, so you need to look at the logs to give you more info on what is going on.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Sandro Galletti]

The system version of WLC is this: 7.2.110.0

I use ISE portal.. and you can tell me where i collect Logs?

If you fix the main post, i reply there!

Thx you.