NAC - AP38xx identified as device family Kindle

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
Hi,
I've enabled MAC auth (allow all) on my D2 to get more data in my NAC DB.
Everything is working but my AP38xx are identified as Kindle devices (screenshot below).
I'm running Netsight/NAC 6.2.0.211.

Any idea, should it show the correct model or are the AP38xx's not yet in the NAC fingerprinting DB.



-Ron
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,880 Points 20k badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,640 Points 5k badge 2x thumb
Ronald, Support for AP38xx series are in 6.2.0.221, which was released yesterday. You would need to download the binaries for Netsight and NAC devices and upgrade them both for support in accordance with the release notes.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 48,880 Points 20k badge 2x thumb
Mike,
I've..
- upgraded Netsight&NAC to 6.2.0.221
- deleted the end-system in NAC (all checkmarks set - delete all info)
- reboot the AP3825i so a new authentication is done

Still the device is identified as a Kindle.
Photo of Mike Thomas

Mike Thomas, Employee - GTAC - NMS

  • 7,640 Points 5k badge 2x thumb
Hi Ronald, can you please open an online case or call one in. You can reference this url.  We suspect the OS-detect method is off. This is typically based on DHCP option 55 for fingerprinting. So that is why we ask most routers to forward a helper-ip to the NAC(s) IP. We just listen to DHCP packets for this reason.  A trace should tell us what if you can capture this process from the NAC or in between point. Most customers do not authenticate their AP's via NAC, so we may not have seen this before based on that assumption.

Additionally, we can enable the following debug using following methodology discussed here.
https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-Debug-Methodology...