Skip to content
Support
Troubleshooting

Improving captive-portal detection for iOS devices

Why enabling DHCP Addr. Required on Cisco WLC guest SSIDs helps iPhones and iPads reliably trigger the Captive Network Assistant on open guest networks.

iOS devices (iPhone, iPad) optimise network connectivity by attempting to reuse previously assigned IP addresses when reconnecting to Wi-Fi networks. While this improves connection speed and battery efficiency, it can interfere with correct detection and display of captive portals — especially on guest networks without strict DHCP enforcement.

Cisco Wireless LAN Controllers (WLC) expose a setting called DHCP Addr. Required that significantly improves the captive-portal experience for iOS devices.

Problem

Section titled “Problem”

Without DHCP Addr. Required enabled:

  • iOS devices attempt to use a cached IP address from a previous connection.
  • They may skip the DHCP process unless forced to revalidate.
  • If the old IP address is invalid or doesn’t match the current network, connectivity issues occur.
  • Captive-portal detection (via the Captive Network Assistant) may fail or be delayed.

Result: users have trouble reaching the network or the Captive Portal login page doesn’t appear promptly.

Solution — enforce DHCP address assignment

Section titled “Solution — enforce DHCP address assignment”

Enabling DHCP Addr. Required on the WLC SSID:

  • Blocks client traffic until the full DHCP handshake completes.
  • Forces every device to request and obtain a valid IP address before any other network access is allowed.
  • Triggers iOS devices to perform a fresh DHCP discovery immediately upon connecting.
  • Ensures correct network parameters (IP, Gateway, DNS) are in place and the Captive Network Assistant fires reliably.

Result: iPhones and iPads consistently open the Captive Portal login window as expected.

Conclusion

Section titled “Conclusion”

Enabling DHCP Addr. Required on WLC guest SSIDs is crucial for a smooth and reliable captive-portal experience, particularly for iOS devices. It prevents stale IP-address reuse, accelerates correct network access and improves the overall guest experience on public or enterprise guest Wi-Fi networks.

Section titled “Related”

DHCP Option 114

Modern captive-portal discovery that sidesteps probe-endpoint quirks.

Walled garden

Where Sign In endpoints and probe URLs are whitelisted pre-auth.

MAC randomization in Apple products

iOS 18 / macOS 15 MAC behaviour for the same guest fleet.

Support checklist

The full triage path for guest-access incidents.

Next

MAC randomization in Apple products

Summary of the MAC-address handling changes in iOS / iPadOS 18 and macOS 15 — three Private Wi-Fi Address modes, default behaviour per network type, and what end users need to do to keep stable network access.

Impact of Fast Transition (802.11r) on guest Wi-Fi access

Why 802.11r should be disabled on guest and public WLANs even though it helps in controlled enterprise environments — common failure modes, root causes and the recommended configuration.