I have checked a few of those devices and the 2nd character of their MAC addresses is one of 2, 6, A or E. It is for wired, but it is applicable similar to wireless. Here is a video on how to configure ClearPass role using the ClearPass Profiling data. With a randomized MAC for those devices, there is just no way to know which of the two it is, and the device will be classified as one of those.ĬlearPass Device Insight can add traffic information on top of the existing profiling methods like DHCP, SNMP, etc, so then you can more reliably profile devices relying even less on the MAC address. In recent versions, some fingerprints have been added that do check the MAC range, like for Amazon Kindle (eBook) and Amazon Echo (Voice Assistant) the fingerprint is exactly the same. In ClearPass the MAC in most cases is not used in profiling. Is this something to do with Apple MAC randomization feature? If yes, is there anything that can be done on CPPM or is it a matter of asking the user to disable that feature?Īssigning the roles based on fingerprints is in most cases recommended over MAC prefix or vendor name, with MAC randomization even more as the MAC can no longer be used for profiling. It's DHCP Option 55 and Options matches exactly the same as the one that isn't profiled correctly. I have attached a comparison of a device profiled correctly as an Apple iPhone. I did a check of the device MAC and it doesn't appear to belong to Apple. When I checked the endpoint attributes, it has the fingerprints of an Apple iPhone but no Host MAC Vendor details.

A device was denied network access because it wasn't profiled correctly.

If you have urgent issues, always contact your Aruba partner, distributor or Aruba TAC Support. This in fact shows the power of profiling, that it even detects the device without a registered MAC Address.Ĭheck this Technical Paper on MAC Address Randomization that was recently posted. That feature is by default enabled in IOS and iPadOS 14, Android 10. Looks like your device is doing MAC Address Randomization, which results in the MAC address used not being assigned to Apple. Subject: Device with Apple fingerprints but no host mac vendor info

What is my kindle mac address