Beryl and captive portal not working

sarkyscouser · 2022-02-14T11:18:37.151Z

A couple of weeks ago I bought a Beryl and last week I tried to connect it to a hotels wifi (Premier Inn in the UK). However I just could not get the captive portal up on my phone or laptop via the Beryl (but could directly). I had 2 Android phones with me and a windows laptop. None of these could get the captive portal via the Beryl. I turned off dns rebinding protection, signed into the wifi directly from my laptop then tried cloning the mac address to the Beryl but nothing worked.

I’m using the Beryl in repeater mode and it works fine with my home wifi.

I have tried the advice here: Connect to Captive Portal - GL.iNet Docs

Any ideas?

alzhao · 2022-02-15T03:16:51.995Z

Does Beryl connect to the hotel wifi or not?

After you turn off DNS rebind protection, have you tried to reconnect to hotel wifi again?

For mac clone, can you make sure you are using firmware 3.211? Repeater mac clone only works in this firmware.

sarkyscouser · 2022-02-16T09:35:35.005Z

Thanks I’ll try again in a couple of weeks next time I’m travelling, probably to same hotel as it happens.

sarkyscouser · 2022-03-21T09:56:23.082Z

I’ll be back in the same hotel tomorrow night so will try this again and report back, thanks

limbot · 2022-03-21T10:08:41.654Z

Also try making the first web site u try to visit http://www.neverssl.com {note the http:)

sarkyscouser · 2022-03-21T11:06:40.308Z

Thanks @limbot that’s a new one for me, never come across that tip before

wcs2228 · 2022-03-21T13:44:41.946Z

You can also try setting a Static IP address on the router to be the same DHCP IP address that was assigned to your phone:

Mac Clone on but still can’t connect Technical Support for Routers

The hotel had a pay-per-device setup. I used my iPhone as the device I paid for to connect to the portal. The only way I could connect behind the gl.inet router was to go into the advanced settings and set the router’s client IP address to Static and set it as the same IP address given to my phone (the device that connected originally to the network) via DHCP when I originally connected the phone. If the router just got it’s own DHCP IP address, I couldn’t connected to the internet even though t…

I do not work for and I do not have formal association with GL.iNet

sarkyscouser · 2022-03-21T13:59:28.899Z

@wcs2228 thanks will give that a try as well

terry23 · 2022-03-22T01:49:22.138Z

That’s literally what I did.

sarkyscouser · 2022-03-25T08:32:01.869Z

I made some progress with this, this week. Here’s what I discovered:

I could connect to the hotel wifi with our without mac cloning. With mac cloning need to restart router after original device has left the wifi network otherwise there is a mac address conflict (obviously).
To get the hotels captive portal passed through I needed to turn off the nextdns dns profile I had active on the router and use the hotels dns server. I’m assuming that this means anything else from a dns perspective should be turned off until you’ve passed the captive portal.
The wifi blocked port 853 (DoT) so android private dns (nextdns in my case) didn’t work so I had to download and install their app which spoofs a vpn to work instead. I left nextdns turned off on the Beryl.
I had dns rebinding protect turned off, didn’t have the chance to try with it on
My Beryl would only stay connected to the hotel wifi for around 30min before being kicked off. I put this down to a combination of the hotel wifi being poor (1-4 Mpbs ) and the hotel being busy and will try again next time as I stay in the same hotel pretty much on a monthly basis.
The hotel was a Premier Inn in the UK with wifi provided by Virgin Media.
The neverssl link above seemed to be useful as sometimes some devices just can’t find a connection.

xirixiz · 2024-03-23T10:11:44.415Z

I face the same issue (Berryl AX). Via wwan the captive portal doesn’t show, even it shows I’m properly connected. When I attach a cable to the wan port (found the kpn router in the closet ), then the portal pops up instantly. Tried everything, even entering the captive portal url myself, local dns settings set using the wwan auto provided dns. Rebind attack disabled… whatever I try, not able to make it work.

admon · 2024-03-23T10:14:32.642Z

xirixiz:

even entering the captive portal url myself,

What happens then? Simply nothing?

xirixiz · 2024-09-19T06:53:27.851Z

Late response, but I fixed it by changing the TTL. More info: OpenWRT TTL manipulation on a travel router explained · GitHub

Installed package: iptables-mod-ipopt
And made this persistent: iptables -t mangle -I PREROUTING 1 -j TTL --ttl-set 65

I first validated the execution manually to make sure no errors popup.
Then validated by doing a ping to 1.1.1.1 for example. This then should show a TTL of 65, and not 64 anymore.

Other source: Changing TTL in OpenWrt 22.03 - #11 by wcs2228