Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
16.7 Legacy Series
»
Captive Portal not working with Android devices
« previous
next »
Print
Pages: [
1
]
Author
Topic: Captive Portal not working with Android devices (Read 20969 times)
StP
Jr. Member
Posts: 62
Karma: 2
Captive Portal not working with Android devices
«
on:
September 09, 2016, 08:48:42 am »
It seems the general discussion forum is not (regularly) visited by OPNsense developers. So I'm reposting here...
------
We did set up a guest WIFI access point following
https://docs.opnsense.org/manual/how-tos/guestnet.html?highlight=captive%20portal
It works fine for Windows PCs and iOS devices.
But Android devices do not show the login screen.
Neither automatically (as my iPhone does) nor after opening a browser and entering an arbitrary URL.
Any ideas?
Stefan
Logged
wifimasters
Newbie
Posts: 19
Karma: 1
Re: Captive Portal not working with Android devices
«
Reply #1 on:
September 13, 2016, 05:08:03 pm »
Hi there, do you have updates on this one?
Mine displays fine on old and new androids but after authentication that's where the the re-direction of external website doesn't work.
Good on your topic.
Logged
StP
Jr. Member
Posts: 62
Karma: 2
Re: Captive Portal not working with Android devices
«
Reply #2 on:
September 14, 2016, 03:25:48 pm »
No answer yet.
Problem still not solved.
StP
Logged
jschellevis
Administrator
Full Member
Posts: 156
Karma: 37
Re: Captive Portal not working with Android devices
«
Reply #3 on:
September 14, 2016, 03:45:11 pm »
@StP I think it has to do with Android devices detecting the captive portal. It is unrelated to the Captive Portal feature itself. I'll look into it later.
Logged
StP
Jr. Member
Posts: 62
Karma: 2
Re: Captive Portal not working with Android devices
«
Reply #4 on:
September 16, 2016, 08:51:13 am »
Thanks.
Hopefully you will find something...
Stefan
Logged
jschellevis
Administrator
Full Member
Posts: 156
Karma: 37
Re: Captive Portal not working with Android devices
«
Reply #5 on:
September 21, 2016, 04:02:08 pm »
Ok, finally got round to test this and found it is best to have Android detect the captive portal upon wifi connection. Then the user will be logged in already before requesting any page, this is specically needed when requesting https pages as when not logged in it may not work at all or produce an error about an invalid certificate.
What you need to do to make this work is simple, google checks for a page on the
clients3.domain google.com
to automatically have the user presented with the login page, simply configure your dns forwarder/server to have that domain point to the ip of your login page.
In my case the captive portal is on 192.168.1.10 and this is how my overwrite looks like:
Also note that is easier to have the Captive Portal in http mode, when using https the CP need to have a vlid certificate otherwise it will show a certificate error.
«
Last Edit: September 22, 2016, 09:44:08 am by jschellevis
»
Logged
StP
Jr. Member
Posts: 62
Karma: 2
Re: Captive Portal not working with Android devices
«
Reply #6 on:
September 26, 2016, 02:21:35 pm »
Thanks for your efforts.
Unfortunately it does not work.
I will try to capture a connection attempt and see what's in there.
Regards
StP
Logged
jschellevis
Administrator
Full Member
Posts: 156
Karma: 37
Re: Captive Portal not working with Android devices
«
Reply #7 on:
September 27, 2016, 09:18:56 am »
I have tested it with 2 different Android devices, iphone and a macbook pro. With all of these devices everything works as expected. Not much more I can do.
The way it should work on the Android devices is that upon connection to the wifi network it will prompt you to login, this solves the ssl issue you may have when capturing a connection not intended for the firewall and protected with ssl. So first you login and then open the connection to the page you want.
Best to try with the captive portal in http mode and add the https layer later so you are not testing two different issues at the same time.
When you are not able to solve the issue, just start with a clean install, upgrade to latest version and then do a simple setup like in the docs and nothing else. So only WAN, LAN and put the captive portal on your LAN.
Test if that works by visiting a http page (not https!), the login page should popup and after login you will be redirected. If that works then you can connect a wifi access point to your LAN and add the host overwrite as I suggested. Try connecting to the wifi with your android device and if the host overwrite works then you will be prompted with the login question. (make sure the DNS is set to the ip of OPNsense so the resolve will happen there, otherwise the host overwrite won't work).
Login and then try to access any page, http or https.
Again if you do not first login and try to access a https page, then your browser will not allow it due to the ssl certificate mismatch (man in the middle).
Logged
wifimasters
Newbie
Posts: 19
Karma: 1
Re: Captive Portal not working with Android devices
«
Reply #8 on:
September 27, 2016, 07:37:27 pm »
Hey J, thanks for the useful update.
I tried browsing http sites (also modified the DNS overide thing) and I can see it's reaching to the sites BUT it's a weird because each http URL has suffix of "?refresh" just stalled and keep refreshing.
I heard there's some updates coming up, i hope fix is included.
thanks!
Logged
StP
Jr. Member
Posts: 62
Karma: 2
Re: Captive Portal not working with Android devices
«
Reply #9 on:
September 28, 2016, 04:53:07 pm »
Problem solved!!! But I don't understand why...
During the very first installation of the system (16 months ago) I defined a list of DNS servers under "System/Settings/General".
And the first entry was our local domain's DNS server.
The one that is used by all domain members.
The public DNS servers follow after that internal one.
Maybe this is not a clever configuration but it always worked.
Removing our internal DNS server from the list lets Android clients log into Captive Portal.
I do understand that a WIFI client cannot access that internal DNS server as this is blocked by the firewall.
But:
- Why is no other public DNS server used?
- Why did it work for iOS and Windows clients?
One other thing: I just installed 16.7.5 over 16.7.4. Any possible influence?
Best regards
StP
Logged
franco
Administrator
Hero Member
Posts: 17474
Karma: 1587
Re: Captive Portal not working with Android devices
«
Reply #10 on:
September 29, 2016, 08:15:55 am »
- Why is no other public DNS server used?
All DNS servers are written into the dhcpd config and should materialise to the clients. Maybe Android simply ignores all but the first?
- Why did it work for iOS and Windows clients?
See above.
I don't see any code that could have affected this from 16.7.4 to 16.7.5.
Cheers,
Franco
Logged
StP
Jr. Member
Posts: 62
Karma: 2
Re: Captive Portal not working with Android devices
«
Reply #11 on:
September 29, 2016, 09:13:24 am »
Franco,
thanks for the clarification.
I'm fine now
Best regards
StP
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
16.7 Legacy Series
»
Captive Portal not working with Android devices