A trip on public transport often turns into a forced break from work or leisure if there's no internet access. In megacities like Moscow, St. Petersburg, and Kazan, the subway is covered by a stable wireless signal, used by millions of passengers daily. However, while logging on to the network on a smartphone is automatic or requires a single tap, laptop may require more complex manipulations for authorization.
The main difficulty lies not in searching for a network, but in the mechanism authorization, which often requires entering a phone number or confirming via SMS. Laptops, especially those running Windows or Linux operating systems, don't always handle redirects to the provider's website correctly. This creates a situation where the connection appears to be established, but the internet isn't working. Understanding how it works captive portal will help avoid unnecessary nerves.
In this article, we'll walk you through a step-by-step procedure for various operating systems and examine common errors that prevent full access. You'll learn how to properly configure your network adapter, which services may be blocking access, and how to secure your data on an open city network. The key point is to force the authorization page to be called via an HTTP request, since modern browsers use the secure HTTPS protocol by default.
Searching for available networks and initial connection
The first step is always finding a signal. Metro cars typically broadcast several networks with similar names, such as MT_Free or WiFi Metro. You need to select the one officially owned by the metro operator. You can open the list of available connections from the system tray in Windows or from the top bar in macOS and Linux.
After selecting a network, the system will ask for connection confirmation. Unlike home routers, you don't need to enter a WPA2 password, as security is implemented at the gateway level. Click "Connect" and wait for the status to change to "Connected" or "No internet access." The latter status is normal until authorization is complete.
Often, the operating system automatically detects the need to log in and displays a notification. If this doesn't happen, you should launch the browser manually. Try visiting any website using the HTTP protocol, for example, http://neverssl.com or simply http://example.comThis action will redirect you to the operator's page.
- 📡 Make sure that Wi-Fi is activated and not in airplane mode.
- 🔍 Choose a network with a name containing the word Metro, MT, or the official city logo.
- 🔓 Don't try to enter the password if the network is marked as open (no lock icon).
- 🌐 Use your browser in incognito mode to avoid caching old pages.
⚠️ Note: During peak hours, the number of connected devices may reach the access point's bandwidth limit. If the connection fails on the first attempt, wait 1-2 minutes and try again; a slot in the address pool may become available.
The authorization process on different operating systems
The login mechanism may vary depending on the operating system installed. Windows 10 And Windows 11 The "Login" window often opens automatically. If this doesn't happen, the browser may be blocking the redirect due to security settings. On macOS, the system automatically recognizes the need for authorization and opens a special pop-up window that blocks further actions until you enter your credentials.
On Linux distributions such as Ubuntu or Mint, automatic page opening is less common. You often need to manually enter the gateway address in the address bar. You can find it in the terminal by entering the command ip route or nmcliThe address usually looks like 192.168.x.1 or 10.xxx
Modern browsers like Chrome or Edge use the technology HSTS, which forces websites to use a secure connection. This can interfere with the login page, which often only works over HTTP. In this case, try entering the address as http://captive.apple.com or a similar test URL that does not have a redirect to HTTPS.
☑️ Checklist for successful authorization
If you're using a corporate laptop, your firewall or proxy settings may be blocking the redirect. In this case, temporarily disable third-party antivirus software or VPN clients. Once you've successfully logged in and regained internet access, restore your protection to its default state.
Troubleshooting Redirects and DNS
The most common situation is when the network is connected but the login page doesn't appear. This can be caused by the DNS cache or static IP settings. The system is trying to find the login page at old or incorrect addresses. Resetting your network settings is necessary.
First, try clearing the DNS cache. In Windows, this can be done via the command prompt running as administrator. Enter the command ipconfig /flushdnsOn macOS, use Terminal and the command sudo dscacheutil -flushcacheAfter this, restart your browser.
Another cause could be a static DNS, such as Google (8.8.8.8) or Cloudflare. Public subway networks often require the use of the provider's DNS servers to correctly redirect to the login portal. Change your network adapter settings to obtain DNS automatically.
| Problem | Possible cause | Solution |
|---|---|---|
| The page is not loading | Blocking HTTPS | Use http://neverssl.com |
| DNS error | Static DNS | Switch to automatic DNS |
| No pop-up window | Ad blocker | Disable browser extensions |
| Connection timeout | Point overload | Wait or change carriages |
What to do if nothing helps?
Try creating a mobile hotspot on your smartphone, connecting to it from your laptop, and then connecting to the metro Wi-Fi from your smartphone. In this case, the laptop will work through your smartphone, which will handle authentication if your carrier's app allows internet sharing, or you can use your smartphone as a gateway after logging in.
Setting up network profiles and security
After a successful login, the system can remember the network. However, in the metro, this isn't always convenient, as re-authorization may be required the next time you log in due to a MAC address change or session expiration. You can control the profile behavior in the Wi-Fi settings: connect automatically or prompt each time.
Security in open networks is a critical issue. Data transmitted can be intercepted by attackers in the same train car. VPN (Virtual Private Network) is a must for working with sensitive information. Encrypting the tunnel will protect your logins and passwords from sniffers.
It's also recommended to disable shared folders and network discovery. In Windows, this can be done in the "Public" network profile. Make sure your laptop isn't visible to other devices. File sharing and printers should be hidden from prying eyes.
- 🛡️ Always enable VPN when connecting to public hotspots.
- 🚫 Turn off File and Printer Sharing in public places.
- 🔒 Use HTTPS versions of websites wherever possible.
- 🔄 Update your operating system regularly to patch vulnerabilities.
⚠️ Please note: Free access terms are subject to change. The telecom operator reserves the right to limit session time, speed, or require re-authorization when transferring between stations. Current terms and conditions can always be found on the operator's official website or in the metro app.
Using mobile internet as an alternative
Despite the development of Wi-Fi infrastructure, the subway remains an area with unstable signal. Tunnels can block the signal, and overloaded cell towers during peak hours reduce 4G/5G speeds. In such situations, a laptop can be connected to the internet via a smartphone using tethering.
Modern smartphones offer internet access via Wi-Fi, Bluetooth, or a USB cable. A USB connection is the most stable and energy-efficient option. It also charges the phone, which is essential on long trips. Data transfer speeds via a cable are typically higher and more stable than over the air.
If you use your phone's Wi-Fi router, keep in mind that it drains the battery of both devices. On the subway, where you often have to hold your phone in your hands or pocket, the signal can be lost. Combining methods (for example, using the subway's Wi-Fi for downloading files and your mobile phone for messaging) may be the optimal strategy.
Common mistakes and how to fix them
Users often encounter the message "Unable to obtain an IP address." This means the subway's DHCP server hasn't assigned an address to your device. This could be due to an address pool overflow or a MAC address conflict. Try disconnecting from the network, turning off Wi-Fi for a minute, and then turning it back on.
Another common issue is "Limited" or "No internet access" even after entering the SMS code. This may be due to ports or services being blocked by your ISP. Some carriers block torrents or certain protocols. Check if regular web pages can be opened.
If you've changed your device or reset your settings, the system may require you to re-register your number. In some cases, clearing your browser cookies or using a different browser may help. It's also worth checking if your number has a limit on the number of simultaneous connections.
Why can't my laptop see the login page?
Most likely, your browser is trying to open the site using the secure HTTPS protocol, but the authorization system only works over HTTP. Try entering [http://www.google.com/sites ... http://8.8.8.8 or http://neverssl.comAlso check if a proxy server is enabled in your system settings.
Is it safe to enter card details on the metro?
We strongly recommend against entering bank card information or making payments while on an open Wi-Fi network without a VPN enabled. Attackers can intercept your traffic. Use only mobile data for financial transactions.
How long does a communication session last?
The duration of a session depends on the operator's policies. Typically, a session lasts for one day or until you leave the coverage area. If you re-enter during this time, authorization may occur automatically.
Is it possible to connect multiple devices to one number?
Typically, one phone number is linked to one device's MAC address. Connecting a laptop and phone simultaneously may require a second number or the use of the "family sharing" feature, if supported by your carrier.