sabut
August 8, 2023, 4:03pm
1
Hi, I am using a GL-MT1300 Beryl router with the firmware 4.3.6. I tried to connect to the cruise wifi through the router. The connection is fine, the router gets the IP and default gateway info etc, but after series of attempts to load the captive portal page my browser got redirected to the page with the url something like www.whatever-authentication.url/blocked_device.php?blahblahblah
Anyone had this issue before? Is there a way around?
1 Like
sabut
August 8, 2023, 4:28pm
2
Below are some logs
Sun Apr 9 13:35:32 2023 daemon.info hostapd: wlan0: STA 60:57:18:c0:66:79 IEEE 802.11: authenticated
sabut
August 8, 2023, 4:56pm
3
Some thoughts about getting some Internet data. I kept the router connected and also connected my laptop directly to the cruise wifi. At that time the phone that was connected to the router got some new portion of the app notifications. But trying to use a browser on the phone or otherwise get something manually from the Internet was unsuccessful. Also, the wifi connection on the laptop connected to the cruise wifi got very unstable, it kept disconnecting randomly. I am assuming the router experienced the same thing. Once I disconnected the router from the wifi, direct connection to wifi on the laptop stabilized.
You seem to have already done a lot of troubleshooting, tweaking and experimenting. Sorry for not being able to help you there but of note that my firestick with its most primitive of networking settings can connect to host wifi networks much more easily than these so called ātravel routersā. I would stop wasting my time and enjoy the holiday if I were you (and get a different router the next time).
1 Like
So this reads that cloning a āknown goodā MAC to your Beryl might be worth a shot:
sabut
August 9, 2023, 1:25am
6
All of that was when the router already had a cloned good MAC. So essentially 2 devices with the same MAC were connected to the same cruise wifi. Nevertheless, when the laptop disconnects and only the router stays connected to the cruise wifi, it does not work
Well now you have me wondering if there isnāt something ājust not quite rightā going on with the upstream Wi-Fi & the GL device. Can you do a site scan from a āknown goodā connected device to the shipās Wi-Fi? Eg:
sabut
August 9, 2023, 2:06am
8
Not sure if this is what you wanted to seeā¦ Survey feature is not included in the free version of Netspot
sabut
August 9, 2023, 2:29am
9
Here is another one from Xirrusā¦
So, presuming it is the right one for the hotspot/captive portal, the only BSSID with anything close to approp. SNRās āModeā is reporting AC but uses the 2.4GHz band, Channel 11 (YMMV but I consider -70 dB to be about 50% signal quality).
Your screen shot is better than nothing but Iād expect anything truly Wi-Fi AC (aka Wi-Fi 5) to be above Channel 12 (eg: Ch 36, 56, 149, 162, etc.) comparing the survey of my neighbourhood via the afore-linked Wifi Analyzer. It shows the specific frequencies/SSID used (see its screenshots). Iām not how much of that would apply to Enterprise-class gear as found from Aruba Networks.
IDK; at this point Iād try to improve the quality of the signal for both SSIDs. That apparent āAC on 2.4Gā has me disconcerted, though.
EDIT: Yeah, those āWi-Fi Modesā of the second screenshot lead me to want to ensure I match as many of those specs for the Repeaterās 2.4 GHz radio.
sabut
August 9, 2023, 2:46am
11
Maybe we are talking about different things hereā¦ I am not trying to improve the signal quality. Just trying to connect more than one device I paid for
Yeah I get what youāre trying to set up but I was somewhat thinking the signal quality might be at play.
That should (ideally) just be a matter of a MAC Clone but you report that didnāt avail the issue. You also said DNS & VPN isnāt in play so Iām really not sure how much more I could personally offer for help.
Do you have a length of Ethernet to attempt Ship WLWAN ā Repeater ā LAN ā Laptop?
Beyond that, all I got is & it may not even be related:
Iāve had problems with captive portals, particularly with my Chromebooks (looking at you Delta), and I see others have had, so I thought I would put down a few notes in case it would be helpful.
Some captive portals operate through a form of DNS poisoning. When you make a connection to a wifi router, you get an IP and a DNS server. Mobile devices, most modern OSs and browsers will immediately run a captive portal detection test by issuing a DNS request through port 80 for some identified serveā¦
sabut
August 9, 2023, 3:04am
13
Unfortunately I do not have a cable with me.
Well this states cloning the MAC solves all issues, but that is not working for me. Of course I have a lot less time and budget for this little project than the whole cruiseline company, but the solution must be something stupidly simpleā¦
It probably is but it seems Iām either too stupid or simple to further assist. Iāll bow out here.
sabut
August 9, 2023, 3:06am
15
Thanks for your help dude! Maybe I should really forget it and enjoy the holiday
2 Likes
Enjoy your time on the boat.
Here is my thought::
The MAC Address of the access point of the boat is Aruba enterprise.
Companies are using software like Clearpass that can block mac address switching. Itās becoming harder to use portable routers.
The cloned MAC address needs to also match the IP address as well, try cloning both IP and MAC. BUT that still might not work as it also checks other items like OS, etc of the device. So if you have a windows machine, then the same MAC is used for a Linux machine, it wonāt work as the profile is a mismatch.
So please enjoy your trip instead
https://www.arubanetworks.com/techdocs/ClearPass/6.6/PolicyManager/Content/CPPM_UserGuide/Uses/UseCaseMACAuth.html
1 Like
I was recently camping on a farm and faced a similar problem with trying to use the Beryl AX as a repeater with no amount of MAC cloning, DNS changesā¦etc working at all and I could not believe that their system would have been sophisticated enough to block the router in the way you have described. Furthermore, trying a different make worked straight away and with no fuss at all leading me to the conclusion that there is undoubtedly an inherent issue with the GL.iNETās abilities to repeat WiFi and/or deal with captive portal.
Yep; I may well be quite simple (note to self: read the damn logs! ). Perhaps itās a matter of disabling (ideally just adjusting the timeouts of) Multi-WAN tracking as the Repeater appears to handshake to the WLWAN but then drops connectivity some 13 seconds later:
Sun Apr 9 13:39:05 2023 daemon.notice hostapd: EAPOL-4WAY-HS-COMPLETED 60:57:18:c0:66:79
Sun Apr 9 13:39:08 2023 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.8.218 60:57:18:c0:66:79
Sun Apr 9 13:39:08 2023 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.8.218 60:57:18:c0:66:79 LAPTOP-NAME-REDACTED
Sun Apr 9 13:39:21 2023 user.notice mwan3[9210]: Execute ifdown event on interface wwan (wlan-sta0)
GL GUI ā Network ā Multi-WAN ā Interface Status Tracking Method ā Repeater ā [gear icon(s)]
(I swear Iām bowing out now!)
Good find, I skimmed the logs myself. I didnāt notice the mwan3. I donāt think that multi wan is enabled by default out of the box, is it?
The router seems to connect to the ship wifi and can reach the gateway and what not just perfectly. The problem is that the traffic does not go anywhere, like something is blocking it. So I am wondering how to make the ship wifi believe my router is my laptop that is a āgoodā mac.