cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

SOLVED
Highlighted
A model citizen

Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

Hello,

 

We have an problem with our guest WiFi. The splashpage from the ISE doesn´t appear for signing in.

With Windows notebooks, Android devices and Apple Notebooks it´s working well but not with Apple iPhones (from IOS 11.3 and 11.4).

 

Its working with the iPhones on Cisco Controller based wireless LAN conncted to the same ISE.

 

Has anybody problems with iPhones and Meraki and Cisco ISE?

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
A model citizen

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

After weeks spending with support and a Cisco Case Cisco made a patch on our Cisco-ISE.

It´s working better now, not perfect but better.

 

Now we have this ISE versions:

Version: 2.2.0.470
Patch Information: 1,2,7,8,9

 

View solution in original post

5 REPLIES 5
Highlighted
Here to help

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

if you are using a self-signed cert in ISE, your users might be getting a warning on the cert before joining.  a good test would be to try to join via an android phone that either has never joined and or delete the ssid (and cert) and see if it give you a cert warning.

Highlighted
Getting noticed

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

Do you have *.apple.com in the walled garden list on your Guest WiFi? If you do, remove it.

 

If the iPhone can get to apple.com it doesn't show the splashpage until the user opens a browser and tries to go to a non-HTTPS website (which are surprisingly tricky to find these days).

 

I don't know why meraki added this as a default entry, it makes the experience worse for apple devices.

Getting noticed

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

Further to this, Apple's WiFi detection is simple, it'll try to connect to:

 

http://captive.apple.com/hotspot-detect.html

 

If it does not get a success reply, the captive web portal browser will appear which will redirect to either Meraki's Authentication splash or a customer Radius Authentication service.

 

So if your walled garden is allowing access to *.apple.com, the Apple device will think that you have access to the internet without authentication and continue as normal. However the user won't be prompted to authenticate until they try to visit a non https site. 

Highlighted
Here to help

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

You might want to also check the FW rules in the Meraki help section.  The Apple systems manager is listed there.

meraki fw rules.PNG

Highlighted
A model citizen

Re: Splash-page doesn´t appear with iPhones since IOS 11.3 and 11.4 with Cisco ISE Guet-WiFi

After weeks spending with support and a Cisco Case Cisco made a patch on our Cisco-ISE.

It´s working better now, not perfect but better.

 

Now we have this ISE versions:

Version: 2.2.0.470
Patch Information: 1,2,7,8,9

 

View solution in original post

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.