ExtremeCloud IQ- Site Engine & Extreme Management Center

 View Only
  • 1.  NAC - AP38xx identified as device family Kindle

    Posted 06-19-2015 10:28
    Hi,
    I've enabled MAC auth (allow all) on my D2 to get more data in my NAC DB.
    Everything is working but my AP38xx are identified as Kindle devices (screenshot below).
    I'm running Netsight/NAC 6.2.0.211.

    Any idea, should it show the correct model or are the AP38xx's not yet in the NAC fingerprinting DB.



    -Ron


  • 2.  RE: NAC - AP38xx identified as device family Kindle

    Posted 06-19-2015 10:57
    Ronald, Support for AP38xx series are in 6.2.0.221, which was released yesterday. You would need to download the binaries for Netsight and NAC devices and upgrade them both for support in accordance with the release notes.


  • 3.  RE: NAC - AP38xx identified as device family Kindle

    Posted 06-19-2015 14:28
    Mike,
    I've..
    - upgraded Netsight&NAC to 6.2.0.221
    - deleted the end-system in NAC (all checkmarks set - delete all info)
    - reboot the AP3825i so a new authentication is done

    Still the device is identified as a Kindle.


  • 4.  RE: NAC - AP38xx identified as device family Kindle

    Posted 06-19-2015 16:13
    Hi Ronald, can you please open an online case or call one in. You can reference this url. We suspect the OS-detect method is off. This is typically based on DHCP option 55 for fingerprinting. So that is why we ask most routers to forward a helper-ip to the NAC(s) IP. We just listen to DHCP packets for this reason. A trace should tell us what if you can capture this process from the NAC or in between point. Most customers do not authenticate their AP's via NAC, so we may not have seen this before based on that assumption.

    Additionally, we can enable the following debug using following methodology discussed here.
    https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-Debug-Methodology...