ExtremeWireless (Identifi)

Expand all | Collapse all

IdentiFi device type access

  • 1.  IdentiFi device type access

    Posted 10-27-2017 07:29
    Hello, all!

    In controller we can see statistics by Operating Systems, Device Type, etc.
    Can we restrict access for device type with rules?
    (without NAC, only with Controller)

    For example Android devices and Apple devices.

    Thank you!


  • 2.  RE: IdentiFi device type access

    Posted 10-27-2017 09:26
    Hi Alex

    Good question....
    If we can see it we should be able to use it....

    But I do not believe this is possible, we will still require a NAC for this....
    Let see what the official response looks like...



  • 3.  RE: IdentiFi device type access

    Posted 10-27-2017 10:11
    Hello ! The device type detection occurs after authentication via DHCP-Snooping. So during authentication process you will not have this information. To use this you need to detect the device type after successful authentication and move the device to another role with a triggered reauth. This can only be done via NAC (COA). br Volker


  • 4.  RE: IdentiFi device type access

    Posted 10-27-2017 10:21
    Hi Volker

    NAC also utilizes DHCP-Snooping to identify the device type...
    Only once NAC is able to resolve the IP does the Device Type appear.
    This should be the same process....



  • 5.  RE: IdentiFi device type access

    Posted 10-27-2017 11:04
    NAC have possibility to access control based on the device type and client OS?
    Can you show me screen-shots or web-link with images of this configuration in NAC?

    Thank you!


  • 6.  RE: IdentiFi device type access

    Posted 10-27-2017 15:31
    just my 2 cents on the topic...

    Device fingerprinting is done by the AP directly and not by the WLAN controller.

    I've no idea how often this data is tx back to the controller but it could be that it's done together with statistics data which isn't that often.

    In that case the controller doesn't has this device type data handy at the point of the authentication process.

    -Ron


  • 7.  RE: IdentiFi device type access

    Posted 10-27-2017 11:04
    Here a example of the default groups....