cancel
Showing results for 
Search instead for 
Did you mean: 

NAC - AP38xx identified as device family Kindle

NAC - AP38xx identified as device family Kindle

Ronald_Dvorak
Honored Contributor
Hi,
I've enabled MAC auth (allow all) on my D2 to get more data in my NAC DB.
Everything is working but my AP38xx are identified as Kindle devices (screenshot below).
I'm running Netsight/NAC 6.2.0.211.

Any idea, should it show the correct model or are the AP38xx's not yet in the NAC fingerprinting DB.

1bbd98d47a62488eb193f6b442717f0a_RackMultipart20150619-11995-ab262h-NAC_kindle_inline.png



-Ron
3 REPLIES 3

Mike_Thomas
Extreme Employee
Hi Ronald, can you please open an online case or call one in. You can reference this url. We suspect the OS-detect method is off. This is typically based on DHCP option 55 for fingerprinting. So that is why we ask most routers to forward a helper-ip to the NAC(s) IP. We just listen to DHCP packets for this reason. A trace should tell us what if you can capture this process from the NAC or in between point. Most customers do not authenticate their AP's via NAC, so we may not have seen this before based on that assumption.

Additionally, we can enable the following debug using following methodology discussed here.
https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-Debug-Methodology...

Ronald_Dvorak
Honored Contributor
Mike,
I've..
- upgraded Netsight&NAC to 6.2.0.221
- deleted the end-system in NAC (all checkmarks set - delete all info)
- reboot the AP3825i so a new authentication is done

Still the device is identified as a Kindle.

Mike_Thomas
Extreme Employee
Ronald, Support for AP38xx series are in 6.2.0.221, which was released yesterday. You would need to download the binaries for Netsight and NAC devices and upgrade them both for support in accordance with the release notes.
GTM-P2G8KFN