iPhones Running iOS6.0 or Later Fail to Associate with a WLAN Using Portal Authentication. iPads Are Disconnected Immediately After Being Authenticated. How Do I Solve These Problems?

If iPhones running iOS6.0 or later fail in Portal authentication, the possible reason is that the AC does not permit access to www.apple.com. You can use either of the following methods to permit access:

• Permit STA access by IP address.

  # Run the nslookup www.apple.com command in the CLI of a STA and find the IP address mapping www.apple.com.

  C:\>nslookup www.apple.com 
  Server: lg-ns2.huawei.com  //Complete host name of the DNS server 
  Address: 10.98.48.151  //IP address of the DNS server 
   
  Unauthorized response: 
  Name:    forwardsh.qq.com 
  Address:  184.26.253.15  
            123.11.125.15  
            123.66.93.15  
            123.2.141.15  
            118.215.189.15    //IP address mapping www.apple.com 
  Aliases:  www.apple.com  

  # Permit access to the IP address mapping www.apple.com on the AC.

  V200R006C20 and earlier versions:

  <AC6605> system-view 
  [AC6605] portal free-rule 1 destination ip 184.26.253.15 mask 32 source ip any 
  [AC6605] portal free-rule 2 destination ip 123.11.125.15 mask 32 source ip any 
  [AC6605] portal free-rule 3 destination ip 123.66.93.15 mask 32 source ip any 
  [AC6605] portal free-rule 4 destination ip 123.2.141.15 mask 32 source ip any 
  [AC6605] portal free-rule 5 destination ip 118.215.189.15 mask 32 source ip any

  V200R006C20 and later versions:

  <AC6605> system-view 
  [AC6605] free-rule-template name f1 
  [AC6605-free-rule-f1] free-rule 1 destination ip 184.26.253.15 mask 32 source ip any 
  [AC6605-free-rule-f1] free-rule 2 destination ip 123.11.125.15 mask 32 source ip any 
  [AC6605-free-rule-f1] free-rule 3 destination ip 123.66.93.15 mask 32 source ip any 
  [AC6605-free-rule-f1] free-rule 4 destination ip 123.2.141.15 mask 32 source ip any 
  [AC6605-free-rule-f1] free-rule 5 destination ip 118.215.189.15 mask 32 source ip any

• You can also permit the access by domain name in V200R006C20 and later versions.

  <AC6605> system-view 
  [AC6605] acl 6000    //Create an ACL rule numbered from 6000 to 6031 and configure an authentication-free rule to permit access to the domain name. 
  [AC6605-acl-adv-6000] rule 1 permit ip destination passthrough-domain www.apple.com 
  [AC6605-acl-adv-6000] quit 
  [AC6605] free-rule-template name default_free_rule  //Enter the authentication-free rule profile view. 
  [AC6605-free-rule-default_free_rule] free-rule acl 6000  //Configure an ACL to permit access to authentication-free resources. 
  [AC6605-free-rule-default_free_rule] quit