cancel
Showing results for 
Search instead for 
Did you mean: 

NAC doesnt recognize Apple iPhones

NAC doesnt recognize Apple iPhones

Gerry1
New Contributor
Hello
At the moment my NAC doesnt recognize some of our iPhones. Doesnt seem to be model related because the error occours whith SE, 6 and 7 and 10 models.
iOS Versions are 12.0; 12.1
If i run a configuration evaluation on the NAC on the devices the rule that now failes on that devices says:

" FAILED: The Operating System Name of: unknown did not match any values defined for this inclusive criteria. "

There should be:
" PASSED: The Operating System Name of: iphone/ipad/ipod/watch/atv matches the inclusive pattern: .*ipod.*. "

Full rule detailed reasons:

" PASSED: The Authentication Type of: 802.1X (EAP-TLS) is equal to or derived from the inclusive criteria: AUTH_8021X_EAP_TLS.
PASSED: The Device Type of: MAC Address: 98:10:E8:xx:xx:xx, IP Address: x.x.x.x, Host Name: null passes the any criteria evaluation.
PASSED: The User Name of: Rxxxxxxxr passes the any criteria evaluation.
PASSED: The Switch IP of 172.x.x.x, SSID: TQ-Mobile, AP Name: wl-ap-02, AP MAC: 20-B3-99-xx-xx-xx, AP Serial: 1349xxxxxxxxxxxx and AP Zone or Group: null and AP Location: null did match this inclusive criteria.
PASSED: The Time of: Donnerstag, 11. Oktober 2018 14:29 Uhr MESZ passes the any criteria evaluation.
FAILED: The Operating System Name of: unknown did not match any values defined for this inclusive criteria.
"

I have absolutely no clue why Operarting System Name is listed as unknown now.
I dont know what or where the NAC gets that Information from. Via DHCP fingerprinting?

NAC / NetSight is version 7.1.3.25

Thanks for help
6 REPLIES 6

Ronald_Dvorak
Honored Contributor
I'd upgrade to v8, I don't think that you'll get any official support for v7.

Brian_Anderson1
Contributor
It gets it mainly from DHCP fingerprinting. You can add an DHCP override if you know the fingerprint, or upgrading to latest version of NAC usually helps. If you have ip-helpers in place for dhcp snooping, I'd try upgrading NAC.

https://gtacknowledge.extremenetworks.com/articles/Q_A/How-does-Device-type-detection-work-in-NAC-In...

GTM-P2G8KFN