Radius Hotspot authentication causes iOS popup
Hi.
I’m using radius authentication on a standard Hotspot setup on RouterOS 6.35. Initial hotspot authentication is done with the proper redirect to login.html on the captive portal, where the user authenticates, and the MAC gets added to radius for future authentications.
But, when the session timeout expires or the active user entry is cleared from the hotspot, iOS devices will repeatedly show a pop-up, with a “Success” message. This seems to happen because the initial Captive Portal test fails, since the Radius authentication is still ongoing, but when the pop-up appears the radius authentication will succeed resulting in a “Success” message. The biggest consequence is that iOS devices won’t use the network until the pop-up is clicked, which shouldn’t even appear in the first place.
I’ve tried several scenarios, and this only happens when radius is enabled, which can only mean that the radius authentication is being run in parallel to the Captive Portal connection test on iOS. This does not happen with CHAP/PAP authentication, even when the active user entries are cleared.
Is there any way to prevent the initial captive portal check from going through before the Radius reply comes in? This seems to be already done with CHAP/PAP.
Thanks!