IOS devices not connecting consistenly, might not be pfSense



  • So we installed a pfSense SG-8860 in front of an EnGenius EWS system and recently started seeing issues with iOS devices.  They come up with either an error saying it's an incorrect password, or network error.  If I release the offline DHCP IP addresses, they then connect.  Although, it seems that just tapping join again, maybe more than twice seems to also solve it.

    SO I am unsure where this is coming from.  Has anyone run across anything like this?

    This of course started just days before our biggest show of the season.  Tomorrow I have 200+ vendors connecting to process credit cards and such.



  • Apple uses a ton of UDP and TCP ports - make sure they are open.  (not just 80 and 443)

    Apple doesn't use netbios so you may want something like avahi running.



  • Right now this thing is basically wide open.  We'll see in the morning when the 250 vendors show up.  We had no more than 75 at any given time today during setup.  But typically we get some 225 devices during these shows.  We'll see how it goes.



  • Try having UPNP enabled.

    Pfsense works great with Apple stuff.



  • Anything I need to worry about enabling those?



  • not if you're already wide open.  That is all you need for pfsense to work well with Apple stuff.  Your problem may lie elsewhere.  ISP may be sucky or the wireless is dropping.


  • Rebel Alliance Global Moderator

    Huh??  You sure and the hell do not need avhai or upnp for pfsense to work with apple devices..

    If they are not getting a dhcp address, I would look more to the wireless.. Especially if says something about wrong password, etc.



  • @johnpoz:

    Huh??  You sure and the hell do not need avhai or upnp for pfsense to work with apple devices..

    If they are not getting a dhcp address, I would look more to the wireless.. Especially if says something about wrong password, etc.

    Work with many apple devices - avahi is their bonjour network discovery service - not important for simple internet connectivity but important if you want to see printers etc without needing to know their addresses and stuff.

    Upnp would be good for things like wi-fi calling, imessage, itunes, apple store etc.  Not required if the default any/any is on the lan, though.

    Jonpoz is right, though.  Technically you don't need any of it, but the nuance with these things is you get that cool "automagic" stuff.