Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

iOS 8.x Apple users and CISCO ISE native supplicant provisioning not working

  •  
    Hi there guys ,

 

I was wondering if anybody else have the following problem:

Apple iOS 8.x users are not able to register their devices on the ISE portal (native supplicant provisioning).

After they receive the redirection from the WLC, they freeze. Apple 7.x users have no problem.

ISE is version 1.2.1.198 patch 2.  WLC is running 8.0.102.14.

Anybody experienced the same?

MB

  • AAA Identity and NAC
12 REPLIES

Allow access to apple.com


Allow access to apple.com during the guest flow or use the portal bypass feature
on WLC.

New Member

Hi Salod, Still not working.

Hi Salod,

 

Still not working. Allowed all the apple.com addresses in the ACL.  Also the Web Auth Captive-Bypass   is Enabled.

New Member

Hi , we hit the same issue

Hi ,

 

we hit the same issue with ISE 1.2.1 P3. The apple devices  browser got freezed after redirection. We tested today iPhone/iPad running 8.1 iOS.

 

Any update from the Cisco TAC Case ?

 

Regards, Holger

New Member

Hi, today we deployed WLC 7.6

Hi,

 

today we deployed WLC 7.6.130 and ISE 1.2.1 P3 .

NSP for iOS 8.1 devices without any issues.

 

Regards , Holger

New Member

Hi Holger, Thanks for the

Hi Holger,

 

Thanks for the update. Could not yet open a TAC case. something with contracts...

Glad to hear it is working with WLC 7.6.130.

Cisco Employee

Hello-You are most likely

Hello-

You are most likely hitting this bug:

CSCup33018
Apple iOS 8 beta fails Native Supplicant Provisioning flow.AnchorThis fix addresses an issue where with single or dual SSIDs, Apple devices running iOS 8 beta software failed to complete provisioning.

 

Patch 10 resolves this, however, you might want to upgrade to patch 11 since I see another iOS 8 related bug:

CSCup88315
Apple iOS 8 beta failing External Web Authentication (WebAuth) with ISE. This fix addresses an issue where Apple devices running iOS 8 beta software failed to complete external web authentication.

 

Here is the link to the release notes:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/release_notes/ise12_rn.html#pgfId-529760

 

Thank you for rating helpful posts!

New Member

Hi Neno, I am aware of this

Hi Neno,

 

I am aware of this bug. As we are running ISE version 1.2.1.198 patch 2 (the latest). This bug should'nt be there anymore. Or am I too optimistic about this?

Cisco Employee

Ops sorry I read "1.2 - Patch

Ops sorry I read "1.2 - Patch 2" :) 

I have no other suggestions outside of opening a TAC case :)

New Member

I am also running ISE 1.2.1

I am also running ISE 1.2.1.198 patch 2 with 8.0.100.  I am testing with an iPad running IOS 8.1.  The device will register in the registration portal, but is not being classified as an IOS device within client provisioning, I believe.  It is getting profiled as a workstation even though all apple device profiles are enabled.  I have an authorization policy for registered devices, and ipad, iphone, ios devices to gain access to the network without going through posture assessment.  I then have my posture assessment authorization rules with apple IOS devices set for a ssid native supplicant profile.  I keep getting an error page on the iPad when connecting to the ISE SSID saying "Client Provisioning Portal     ISE is not able to apply an access policy to your log-in session at this time.  Please close this browser, wait approximately one minute, and try to connect again".  It gives this message over and over.  If I turn off the posture checking authorization profiles, the IOS device is selected as a rule further down which tells me that ISE does not recognize it as an IOS device in the profiling or client provisioning.

1515
Views
10
Helpful
12
Replies