Apple CNA doesn't show up

RouterOS General
1

Hi All,
we encountered a strange issue that is causing headaches to our clients.
We configure the hotspot radius service within a Custom HTML directory and at the first iOs SSID join, a device shows the customised CNA. That’s great, but now the problem.
Once a user comes back again and rejoins the same SSID, no CNA is popped up.
Android seems to work every time.

We have done several tests, even trying what apple calls “Modern Captive portal” https://developer.apple.com/news/?id=q78sq5rv introducing the DHCP Option 114 but without luck.
We tried to remove HTTPS redirect and use HTTP, no fix.
We tried to use local users (no radius), but no fix.

The only way to popup the CNA every time a user needs to join the hotspot is to remove the custom HTML, and this seems to work.
Is it possible to Fix this even on a customized HTML directory? It seems a clear bug to us.
Thank you all.


PS
I forgot to mention that we tried ROS 6.48.6 Long-term and 6.49.6 Stable

2

Just a quick update, we found that the main cause of this was due to the old HTML template used.
We reset the HTML inside the Mikrotik and with the basic one it works.
We are working to “migrate” our template with the new schema.
Enjoy.

3

Just a quick update for you guys.
Randomly Apple disables this option, If this is turned off, CNA will not appear at all:
20220830-110745_090122_091249_AM.jpg

4

We finally found the cause of all headaches.
There is a file called api.json inside the new standard hotspot folder, that triggers the Apple Cna.
With it, it pops up.
Without it doesn’t.
Please document this in the guides guys, otherwise, engineers like us will get sick.

5

THANK YOU… IT HELPED ME SOLVE MY PROBLEM

6

I can confirm that this is the solution for the latest Apple device login problems.
Just add the api.json (in my case from ros 7.6) to the root of your (custom) hotspot folder.

7

Hi mktwifi,

did you modified something into api.json? or did you add a Option 114 to call this file?

8

I have configured the hotspot on the mikrotik with the api.json file.
The mikrotik sends in the DHCP process, the url https://“dns name”/api.
But I don’t see the device (iphone) make an API query to the mikrotik.

In no way can I get the captive portal to jump on some Iphones.

JSON file:

{
“captive”: $(if logged-in == ‘yes’)false$(else)true$(endif),
“user-portal-url”: “https://paginaprueba.com”
}

Can you help me please?

9

It doesn’t work for me, i’ve reset the hotspot html, then copied the API.Json file to my customized hotspot folder, then copied the customized folder to my routerboard but still apple devices don’t popup the captive portal ?

10

Mybee interessting fact i found out with the case that the Portal is not working…
I found following Info on the Apple Side:

DHCP Option: 114 (Captive-Portal)
Length: 38
Value: https://example.org/captive-portal/api

DHCPv6 Option: 103 (Captive-Portal)
Length: 38
Value: https://example.org/captive-portal/api

IPv6 RA Option: 37 (Captive-Portal)
Length: 38
Value: https://example.org/captive-portal/api


So i created follwoing DHCP Option for my Hotspot DHCP Server:

/ip dhcp-server option
add code=114 force=yes name="Captive Portal" value="'http://***IP Hotspot Bridge***'"
add code=160 force=yes name=option1 value="'http://***IP Hotspot Bridge***'"
/ip dhcp-server option sets
add name=set1 options="Captive Portal,option1"

Than i had to go to the DHCP Server and activate the DHCP Option.

After this i greated an Walled Garden deny rule.
(iOS is checking captive.apple if there is internet on the connected WLAN)

add action=deny dst-host=*captive.apple* server=****HOTSPOT-SERVER-NAME****

Than move this rule to 1st positon.
Since than my Hotspot Portal is back working on all iOS devices.

Maybe it will help some others.

Info from Apple regarding DHCP Options: https://developer.apple.com/news/?id=q78sq5rv