DHCP Fingerprinting

[johnw]

Hi All, if the controller (in my case a 620) is capable of matching the device type to the options, it would be a great idea to allow us to create a rule based on those device types instead of the fingerprint values?

The idea being that various types of iPhones may end up with different fingerprints but still be iPhones .. and the controller could be given an update which would then have all the new fingerprints

thanks

[cjoseph]

We do not have that today. For now, all iPhones have the same signature....

[awl]

As Colin mentioned, you manually set up the rules today. We're in the final stages of preparing an app note written by Rajiv from an earlier post that will walk you through some of the use cases and how to discover and configure the feature fully.

-awl

[pcurto]

Just a quick note that Aruba has posted an application note on the public website for DHCP and device fingerprinting:

http://www.arubanetworks.com/pdf/technology/AOS-DHCP-FingerPrint-AppNote.pdf

[koenv]

and some bad news for those thinking to implement dhcp fingerprinting on a captive portal SSID:

BUG-ID: 51691, 56746
DHCP Fingerprinting & Captive Portal cannot be used together.

 And from what I was told the fix for this will only be in release 6.2.x.x which is apparantly several months out.

[WorlisMan]

DHCP Fingerprinting is working on my test 3200 using Captive Portal, I've been testing this for a week now and it works fine. The AOS version I'm using is 6.1.3.0.

[stobbe_s]

Can anyone else confirm for me that the Mac OS X Mountain Lion fingerprint has changed from what Lion was?

This is what I'm getting in the network log for an iMac running OS X 10.8.1:

370103060f775ffc2c2e

Previous versions of OS X was very similar, but with an extra "2f" on the end:

370103060f775ffc2c2e2f

I guess if I wanted to cover all OS X versions with a rule - I could use the "starts-with" option instead of "equals".

Updated:  It looks like the change was actually made with OSX 10.7.  I imaged the same Macbook and the fingerprint changed from 10.6 -> 10.7, but stays the same for 10.8.

Thanks.

Steve

[Michael_Clarke]

This looks interesting, https://github.com/inverse-inc/fingerbank/blob/master/dhcp_fingerprints.conf

The values are in decimal though.