guest wifi doesn´t work for Mac & IOS devices

[waqas.arshad]

Hi Experts,

User is able to log in when enter 1.1.1.1 address manually. It works in chrome and firefox but not in safari. Usually when user connect to the guest wifi request will go to the DNS server and automatically redirect to the controller page which is 1.1.1.1. 

7.4.110.0 is WLC Code version.

-Action Taken :
1) Rebooted the WLC
2) Enabled and Disabled the SSID
3) Captured the Debug
4) Proposed the following solution which requires reboot "config network web-auth captive-bypass enable : "
5) Did a reboot to reflect the change

After reload of WLC. Below is the status:

Test Guest SSID created yesterday for Tshoot
1) All Windows Devices are working Automatically
2) There are 4 MAC's. Once is catalina and the other three are are mojave.
3) MAC Catalina device is connecting Automatially
4) MAC Mojave is still not connecting Automatically
5) Smart Mobile Devices on Production Environment is working fine with Test SSID. .

For existing production SSID
Test Guest SSID created yesterday for Tshoot
1) All Windows Devices are working Automatically
2) There are 4 MAC's. Once is catalina and the other three are are mojave.
3) only one Mojave is working
4) Not working with Production SSID

Regards,

Waqas

[JPavonM]

You must avoid the use of IP address 1.1.1.1 as this is public assigned.

https://www.cloudflare.com/learning/dns/what-is-1.1.1.1/

https://1.1.1.1/

Here are some recommendations:

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213535-wlc-virtual-ip-address-1-1-1-1.html

HTH
-Jesus
*** Please Rate Helpful Responses ***

[ajc]

You are running a really old version. What are you using LWA or CWA?. 1.1.1.1 is not an issue at all, I have that on our 12K AP's / 10+ WLC's using that as part of the configuration. What is the model of the WLC you have?.

[waqas.arshad]

@ajc Thank you for reply. Issue is not resolved. We are using following WLC and AP.

WLC Model: AIR-CT5508-K9

AiR-CAP3502I-E-K9

Regards,

Waqas

[ajc]

I have over 10+ 5508 WLC's running 8.3.143 with no issues. I had seen issues in the past with WebAuth on your version.

What device are you using for the Web Portal Authentication, the WLC or something else like Cisco ISE?. If you are using Cisco ISE, what mechanism LWA or CWA?

Please elaborate a little bit more about your Guest WIFI Authentication process.

thanks

[Rich R]

Much more likely to be a certificate issue - what certificate are you using?
Self-signed or valid public cert?

[waqas.arshad]

@ajc We are using Local Authuntication from WLC.

Regards,

Waqas