portal captive-adaptive enable

Usage Scenario

Since WLANs are widely provided, users have a demand for quick and convenient authentication by using applications on mobile terminals, without entering user names and passwords. In such authentication mode, mobile terminals need to automatically display the application-based Portal authentication page and the applications need to communicate with the background server. Therefore, the mobile terminals must be connected to the WLANs during authentication.

iOS terminals such as iPhones, iPads, and iMac computers provide the CNA function. This function automatically detects the network connection status after iOS terminals connect to WLANs. If the network is disconnected, the iOS terminals display a page prompting users to enter user names and passwords. If users do not enter the user names and passwords, the iOS terminals automatically disconnect from the WLANs. As a result, users cannot use applications on iOS terminals for authentication.

To solve the problem, enable the CNA adaptive function so that iOS terminals are redirected to the application-based Portal authentication page when they connect to WLANs. Users can click the link on the page to start specified applications to perform Portal authentication. If users do not start applications to perform authentication, they can still access authentication-free resources on the WLANs.

Precautions

When applications on iOS mobile terminals are used to perform Portal authentication, you can run only the portal captive-bypass enable command to enable the CNA bypass function. After this function is enabled, users who have logged in to the applications can be automatically authenticated and connect to networks, without entering their user names and passwords.

If you run both the portal captive-adaptive enable and portal captive-bypass enable commands, the command executed later takes effect.

Due to restrictions of iOS 9.3.1, mobile terminals using iOS 9.3.1 cannot connect to WLANs after the CNA adaptive function is enabled. To solve this problem, run the portal captive-bypass enable command to enable the CNA bypass function. Terminal users then can be redirected to the application-based Portal authentication page after they open the browser and access a web page.

Authentication-free resources accessed by users cannot contain the URL captive.apple.com; otherwise, terminals cannot automatically display the Portal authentication page.

If the Portal authentication page is of the HTTPS type, terminals can automatically display the Portal authentication page only when an HTTPS URL is used and the domain name certificate is valid.