The situation when smartphone The problem of refusing to connect to the free city network "WiFi_Goren" or "MT_FREE" at depths of tens of meters is familiar to many passengers on the St. Petersburg subway. You descend to the platform, select a network from the list, but instead of the expected authorization page, you see an endless wait or a connection error message. This isn't just a random glitch, but the result of a complex interaction. security protocols, overload of equipment and settings of the device itself.
The problem lies not only in the technical condition of the access point, but also in how your gadget tries to "negotiate" with the authorization server in conditions of an unstable signal. Often, users don't even realize that the blocking is caused by the enabled mode. Private Address (Private Wi-Fi address) or IP address conflicts in a crowded station subnet. Understanding these mechanisms is the first step to stable internet in tunnels.
In this article, we will examine in detail the architectural features of the metro networks and explain why MAC addressing plays a key role in blocking, and we will provide a step-by-step algorithm for restoring access. You will learn what settings in Android And iOS What most often interferes with the connection and how to correct them correctly.
Technical limitations of the metro infrastructure
The wireless access system in the St. Petersburg metro is a complex distributed network spanning dozens of stations and kilometers of tunnels. The main equipment is based on standards. 802.11n And 802.11acHowever, channel capacity is often limited by the provider to ensure basic availability for thousands of concurrent users. When a train carrying hundreds of passengers arrives on the platform, all trying to sync email or messaging apps simultaneously, a "request storm" occurs.
Authorization servers (Captive Portal) can't process all incoming requests for IP addresses, leading to timeouts. During this time, the phone may indicate a connection, but no data transfer occurs. Furthermore, equipment in tunnels is subject to constant vibration and temperature fluctuations, which impacts operational stability. antenna modules.
It's important to understand that a metro network isn't like a home router where you're the only user. There are strict session time and traffic limits. If you try to launch a heavy application immediately after connecting, the server may interpret this as DDoS attack or violation of the terms of use and terminate the connection.
⚠️ Attention: The metro's network equipment configuration may change during scheduled maintenance. If the network was previously stable but now stops working, it's possible the provider has updated encryption protocols or switched service providers.
MAC Addressing and Privacy Issues
One of the most common reasons why The phone can't log in because of the MAC address randomization feature. Modern versions Android (starting with version 10) and iOS (starting with 14) hide the device's real physical address by default, generating a random set of characters for each new network. This improves security in public spaces, but creates problems for metro authentication systems.
The "WiFi_Goren" or "MT_FREE" server may block devices with dynamic MAC addresses, deeming them suspicious, or simply fail to assign them a static IP address within a single session. As a result, you get stuck in a loop: entering a phone number → waiting → error. The solution lies in changing the settings. confidentiality for a specific network.
To fix this, you need to find the desired name in the list of saved networks (for example, MT_FREE), click the gear icon or the "i" information icon and find "MAC Address Type" or "Privacy." Here, switch the value from "Random" to "Device MAC Address." After that, you'll need to forget the network and reconnect.
Why is randomization a hindrance?
Public authentication systems often use MAC addresses as unique user identifiers to limit session time or device counts. If the address constantly changes, the server cannot keep track of each connection correctly, treating each connection as a new device, and blocks access after a few attempts.
IP address conflicts and DHCP settings
Protocol DHCP (Dynamic Host Configuration Protocol) is responsible for automatically assigning IP addresses to connected devices. In metro areas, where device density reaches critical levels, the pool of available addresses can temporarily become exhausted. Your phone requests an address, but the server is silent or assigns an address already occupied by another device due to an error in the lease table.
In such cases, manually setting a static IP address can be a lifesaver, but only if you know the correct range. Typically, subnets like these are used for metro networks. 10.x.x.x or 172.16.x.xAttempt to register an address from a range 192.168.x.x (standard for home routers) will result in a complete lack of connection, since the metro gateway does not route this traffic.
It's also worth considering that some antivirus programs and firewalls on smartphones can block DHCP requests, considering them part of an attack. If you have security software installed, such as Kaspersky or Dr.Web, try temporarily disabling network protection when connecting to metro Wi-Fi.
| Parameter | Default value (DHCP) | Possible manual value (Example) | Risk of error |
|---|---|---|---|
| IP address | Automatically | 10.10.10.150 | High (conflict) |
| Subnet mask | 255.255.255.0 | 255.255.255.0 | Average |
| Gateway | Automatically | 10.10.10.1 | High (no internet) |
| DNS 1 | Automatically | 8.8.8.8 | Short |
The impact of flight mode and power saving
Mode On the plane Airplane Mode completely disables all radio modules, including Wi-Fi and Bluetooth. Many users use it to quickly reboot the network stack: turn it on for 5 seconds, turn it off, and the network is found. However, in the subway, this method isn't always effective due to the peculiarities of switching between cellular base stations and Wi-Fi access points.
Moreover, aggressive energy saving algorithms in modern smartphones (especially in brands Xiaomi, Huawei, Samsung) can "kill" the background authorization process. When you open a browser to enter a phone number, the system may assume the app is consuming too much power during a weak signal and disconnect.
It's recommended to disable Energy Saver mode while on the subway or add the subway network to the exceptions list. A complete network reset can also help if the issue is persistent, but this will require re-entering passwords for all your home and work networks.
☑️ Actions in case of authorization failure
Features of authorization through Captive Portal
The phone number entry page that should appear automatically is called Captive PortalIts mechanism of operation is based on redirecting any HTTP request to a special provider server. However, modern browsers and applications increasingly use a secure protocol. HTTPS, which encrypts requests and prevents your provider from intercepting and redirecting you to the login page.
This is why, even when connected to Wi-Fi, you can see the network icon, but the pages won't load. The browser is waiting for a response from the site, which is blocked by the Metro gateway, requiring authorization but unable to display the login page due to encryption. In this case, manually switching to an unsecured address helps, for example, http://neinet.ru or http://captive.apple.com (for iOS), which will force the authorization window to appear.
Sometimes the browser cache stores an old version of the login page or incorrect cookies. Clearing the cache or opening the page in Incognito (Incogito) often solves the problem by allowing a clear session to be initiated with the server.
⚠️ Attention: Never enter bank card details or passwords for important accounts while on an open metro network until you have fully authorized and established a secure connection. Open networks are potentially vulnerable to attacks such as Man-in-the-Middle.
Smartphone hardware limitations
Don't discount the physical capabilities of your device either. Budget smartphone models or devices older than 5-7 years may have less sensitive sensors. Wi-Fi modulesIn metro conditions, where the signal from antennas located on platforms can be weakened by the metal lining of tunnels and the train body, such phones simply "don't see" the network or lose packet data.
Furthermore, processor overheating during active navigation and 4G/5G use while simultaneously attempting to connect to Wi-Fi can lead to throttling (reduced performance) of the radio module. This causes connection interruptions during peak load periods.
If the network works perfectly on one phone but not on another, the problem is most likely related to the hardware or drivers of that specific device. In this case, updating the phone's firmware to the latest version may contain fixes for the Wi-Fi chip.
Alternative ways to get internet
If all attempts to connect to the metro's free Wi-Fi have been unsuccessful, it's worth considering alternatives. The "big three" operators in St. Petersburg are actively expanding their networks. 4G And 5G In tunnels. Mobile internet speeds deep underground are often more stable and higher than those on overloaded public Wi-Fi.
You can also use internet tethering if you have a second phone with a valid data plan. However, keep in mind that during peak hours, cellular base stations can also be overloaded, and speeds will drop regardless of the connection method you choose.
For mission-critical tasks like remote work or video calls, it's best to wait until you reach the surface or transfer to ground transportation, where signal quality is typically significantly higher due to the lack of a shielding layer of soil and concrete.
Frequently Asked Questions (FAQ)
Why is Wi-Fi slow in the metro, even when there is a connection?
The low speed is due to the high load on the communication channel. Thousands of users share the same bandwidth. Furthermore, station walls and train carriages create physical obstacles to radio waves, reducing the actual data transfer rate.
Is it safe to use online banking via WiFi_Goren?
Using financial apps on open networks is risky. Although modern banking apps use encryption, the risk of data interception or attacks via rogue access points (Evil Twin) remains. It's best to use mobile internet (4G/5G) for financial transactions.
What should I do if the authorization page doesn't open?
Try manually entering the address in the browser address bar. http://neinet.ru or http://1.1.1.1Make sure you're using HTTP, not HTTPS, for the initial redirect. Also, clear your browser cache.
Does an enabled VPN interfere with connecting to the metro's Wi-Fi?
Yes, an active VPN can block redirects to the Captive Portal login page, as all traffic goes through an encrypted tunnel. To access the metro network, you must temporarily disable the VPN, log in, and only then re-enable it.
Why does my iPhone say "Not Secure" when connecting to the metro?
Metro networks are open networks, meaning they don't require a password for initial connection. This is standard practice for public access points. Data security on these networks is ensured only after authorization and depends on the resources you visit (HTTPS).