The modern rhythm of life dictates its own rules, and access to Internet On the road, it's becoming not a luxury, but a necessity. The subways of major cities have long ceased to be a "blind spot," turning into a paved space. Wi-FiHowever, the process of connecting to the network often causes difficulties for users due to authorization systems.
Technical implementation of access in underground passages and train cars requires special procedures authenticationThis could be sending an SMS, watching an advertisement, or accepting a security certificate. Understanding these mechanisms allows you to reduce latency and enjoy a stable connection.
In this article, we'll explore all the nuances of setting up a wireless connection in the city subway. You'll learn why browser The login page may not open. How can I set it up correctly? protocols security and what to do if automatic connection does not work.
Searching for an available network and initial connection
The first step is always to locate the access point. In most subways, the network name (SSID) is constantly broadcast and contains recognizable words indicating the operator or city. This is usually MT_Free, MosMetro_Free or similar variations.
Once detected, you need to initiate a connection. Your smartphone will ask for confirmation, as the network is open. It's important to understand that the lack of a password at login doesn't mean the channel is completely unprotected, but it does require careful attention to the data being transmitted.
The system often offers automatic connection when you're in a coverage area. If you plan to use the subway regularly, it makes sense to enable this option in the settings. Wi-FiThis will eliminate the need to manually select a network each time you enter the lobby.
It is worth noting that during peak hours the number of simultaneously connected devices can reach thousands. Routers, installed in carriages, operate under high load conditions, which can affect the response speed during the initial handshake.
⚠️ Warning: Always check the exact network name before connecting. Attackers can create lookalike access points with similar names to intercept traffic.
Authorization procedures and login through the portal
After successfully connecting to the access point, the system will redirect you to the authorization portal. This is a special page where you must confirm your identity or agree to the terms of use. How it works Captive Portal blocks all other traffic until the procedure is completed.
There are several common verification methods:
- 📱 Sending a short SMS message from a mobile phone to a short number.
- 📺 Watching a 15-30 second advertising video.
- 🆔 Enter your Troika card number or another transport app.
- 🔐 Authorization via social networks or government services.
SMS authorization remains the most common method. After sending a code to the specified number, the connection is activated for a certain time period, usually 45 minutes or 1 hour. After this time, the procedure must be repeated.
If the authorization page does not open automatically, try going to any HTTP address. Traffic filtering systems often intercept unencrypted requests and redirect them to the portal. You can use the address http://neverssl.com or simply enter in the address bar 1.1.1.1.
☑️ Pre-authorization verification
Setting up certificates and security protocols
Some public access systems require the installation of a special certificate Security. This is necessary to encrypt the communication channel between your device and the provider's gateway. Without the correct certificate, the connection may be terminated immediately after logging in.
In the operating system Android When connecting, you may be asked to select an encryption method. EAP. Most commonly used PEAP or TLSIn the Anonymous Identity field, you usually don't need to enter anything, or you need to enter the word anonymous.
For devices based on iOS The configuration profile installation process can occur automatically through Safari. The system will request permission to install the profile, after which a new root certificate will appear in the settings. Its presence guarantees a secure connection.
| Setting parameter | Meaning for Android | Meaning for iOS |
|---|---|---|
| EAP method | PEAP | Automatically |
| Phase 2 | MSCHAPV2 | - |
| CA Certificate | Do not validate | Always trust |
| Identifier | Empty | Empty |
It's important to keep track of certificate expiration dates. If the connection fails after an operating system update, it's possible that the old security profiles have been revoked by your service provider.
Why can't I ignore certificate installation?
Failure to install the root certificate may result in your traffic being transmitted in cleartext within the ISP's tunnel. Although the ISP is typically a trusted organization, the lack of encryption makes your data vulnerable to analysis within the operator's network.
Troubleshooting automatic redirects
A common problem is when the "Connected" status appears, but the internet is down and the login page doesn't appear. This indicates a malfunction. Captive Portal DetectionThe operating system mistakenly believes that the Internet is already available and does not initiate opening the browser.
There are several ways to force the authorization window to appear. First, try clearing the DNS cache. On Android, this can be done through the developer menu or a command in the terminal; on iOS, this can be done by toggling airplane mode on and off.
Secondly, make sure that the Wi-Fi settings are turned off Private Wi-Fi Address (Private Wi-Fi address). Some metro authentication systems bind the session to the device's MAC address. If the address constantly changes, the server cannot complete the login process.
⚠️ Note: If you're using third-party DNS servers (such as Google DNS 8.8.8.8 or Cloudflare 1.1.1.1), the login page may not load. Temporarily reset your DNS settings to "Automatic."
It's also worth checking if yours is blocked browser Pop-up windows or redirect scripts. In incognito mode, such blockers often work differently, which can aid in diagnosis.
Connection features for Android and iOS
Different mobile platforms have their own specific features for working with social networks. Device owners Samsung, Xiaomi and other Android-based devices may experience aggressive battery optimization. The system may disable Wi-Fi to save power when the screen is off.
For users iPhone And iPad It's worth paying attention to privacy settings. The feature for hiding the device's address is useful on open networks, but in the metro it can conflict with the billing system, which requires constant identification. MAC address.
On Android devices, background data permission is also important for Google Play system services. These services are often responsible for checking for internet access and redirecting to the portal.
- 🔋 Disable power saving mode while connected.
- 📶 Make sure geolocation is enabled (required for some protocols).
- 🔄 Reset network settings if the problem persists.
In some cases, manually entering the DNS helps. Try entering a static address in the IP settings and specifying a DNS server. 8.8.8.8 only after successful authorization, although it is better to use automatic settings for the login itself.
Improving connection stability while moving
The subway is an environment with high levels of electromagnetic interference and frequent changes of base stations. As the train moves between stations, the device constantly switches between access points, installed in the tunnel.
To minimize connection interruptions, we recommend disabling the "Switch to mobile data" feature if your Wi-Fi signal is weak. This will prevent constant reconnections and lost login sessions.
It's also worth considering that the signal may disappear completely in deep tunnels. In such situations, the system may not have time to properly terminate the session, and a re-login will be required when the signal reappears. This is normal equipment behavior.
⚠️ Please note: Access terms and network specifications are subject to change by the operator. Always check the latest settings and authorization methods on the official information resources of the transport agency.
The use of external antennas or special cases with signal amplification in metro conditions is ineffective due to the design features of the cars and the frequency range used for coverage.
Frequently Asked Questions (FAQ)
Why doesn't the SMS page open after connecting to Wi-Fi in the metro?
This happens because the browser is trying to open a secure version of the site (HTTPS), but the login portal only works over HTTP. Try entering any unencrypted site into the address bar, for example http://example.com, or use incognito mode.
How long does a Wi-Fi session last in the metro?
The standard session duration after authorization is usually 45 minutes or 1 hour. After this time has expired, you must log in again by sending an SMS or watching an ad.
Is it safe to transfer banking information over metro Wi-Fi?
Using open public Wi-Fi always carries risks. While traffic within the operator's network may be protected, it is recommended not to conduct financial transactions without an additional layer of protection, such as using a trusted VPN-service.
What should I do if I don't receive an SMS to log in?
Make sure you have a cellular signal to receive SMS messages. Sometimes switching your phone to airplane mode and back helps. If the issue persists, try selecting an alternative authorization method if the portal allows it.