Captive portal NAC + Apple Devices OSX

[Tiago_Molinos]

Hi there,

we've been setting up a wireless lan solution with NAC + a couple of identify controllers.
At the moment we're fine tunning the guest network.

I'm running the latest NAC appliance software and version 9.21.04 on the controllers (5110 + v2110).

Right now I'm concerned with two different problems:

1 - Whenever I try to connect an Apple OSX device, it pops up an error:

If I ignore the error and go straight to the browser and open a random page then the portal appears and I can register a device. After the registration is successful I end up in problem #2.

2 - On all Apple devices, after the registration is successful the device never renews the IP address and the eventually an error in the portal is displayed. If I manually reconnect to the network than it gets the correct IP address.

Any suggestion?

Best Regards,

Tiago

[Ronald_Dvorak]

Hi,

#1 - not sure whether that is the problem but is "apple.com" removed from the allowed domains.
GUI NAC Manager, Portal Configuration > Network Settings > Allowed Websites > Allowed Domains > remove apple.com

#2 - why does the client need a new IP ?
Is the guest role in another VLAN/subnet. If yes set the DHCP lease in the nonauth Guest VLAN very low so that the client does a renew very often till the client get's the guest role and is in the authenicated-guest VLAN.

I handle it in another way and use the 2nd NIC of the NAC for guest portal access.
I configure the 2nd NIC in the guest VLAN so the client doesn't need to change the VLAN/subnet/IP.

-Ron