@clembo wrote:
The device type listed in the client table can be determined by one of two things. The first is the DHCP fingerprint. The controller does not have to be the DHCP server, but needs to see the request. If the client is running an odd OS type that is not in the database or has a static IP address or the AP is in bridgd mode this component would not reveal the device type. The second is through HTTP header analysis. Once the client attempts an HTTP request, additional information can be obtained about the device type (Windows XP vs Windows for example).
I hate to nitpick, but the OS Type displayed in the controller's user table is ONLY discovered through http requests and NOT dhcp fingerprints. That is why devices like VOIP phones and others that do not open browsers will NOT have the OS displayed in the controller's user table.
The "show aaa device-id cache" command will show what devices have sent http and were identified in the user table. You can still use the DHCP fingerprint to create a user derivation role for devices that do not use http change their role. Their operating system will not be displayed in the user table of the controller if they do not use http, however:
(host) #show aaa device-id-cache
Device ID Cache
---------------
MAC Device ID Last Update
--- --------- -----------
c0:cb:38:39:63:5f Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0 Thu Mar 12 06:36:18 1970
c4:17:fe:00:57:21 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.1; .NET CLR 1.1.4322; .N Mon Aug 8 13:28:37 2011
c4:46:19:6f:6b:05 Windows-RSS-Platform/2.0 (MSIE 8.0; Windows NT 5.1) Sat Oct 15 14:59:43 2011
c0:f8:da:63:77:48 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB7.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; . Sun Nov 13 11:02:40 2011
78:e4:00:38:96:f2 Windows-RSS-Platform/2.0 (MSIE 9.0; Windows NT 6.1) Sun Jul 10 20:17:30 2011
c4:46:19:30:7e:7c Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.0 Wed Sep 21 11:02:39 2011
c0:cb:38:80:8f:75 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Iron/10.0.650.0 Chrome/10.0.650.0 Safari Thu Oct 27 22:10:09 2011
44:2a:60:f3:62:24 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_7) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.24 Safari/535.1 Wed Jun 22 20:08:17 2011
c0:cb:38:80:9a:ee Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.218 Safari/535.1 Wed Aug 31 19:06:48 2011
f8:1e:df:0a:a2:e8 iTunes-iPhone/4.3.3 (3; 16GB) Thu Jul 28 09:22:13 2011
38:59:f9:03:b4:8b Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.307 Fri Oct 28 13:47:18 2011
00:24:2c:3a:08:37 Mozilla/5.0 (X11; Linux i686; rv:5.0) Gecko/20100101 Firefox/5.0 Wed Aug 3 19:55:32 2011
c4:46:19:30:7f:59 Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0 Mon Aug 8 13:28:58 2011
00:24:2c:3a:08:22 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2; .NET4.0C; .NET4.0E; M Sun Oct 30 18:03:10 2011
00:24:2c:1b:78:48 Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.109 Safari/535.1 Mon Aug 29 06:18:32 2011
00:24:2b:39:67:e4 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET4.0C; .NET4.0E; InfoPath.2) Thu Sep 8 17:40:33 2011
0c:ee:e6:9e:4b:46 Windows-RSS-Platform/1.0 (MSIE 7.0; Windows NT 5.1) Mon Sep 12 08:53:08 2011
0c:60:76:78:9e:4c Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.307 Tue Oct 18 10:48:18 2011
c4:46:19:6f:a3:2c Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.0 Mon Sep 19 16:17:18 2011
c0:cb:38:80:8f:8d Mozilla/5.0 (X11; Linux i686; rv:6.0) Gecko/20100101 Firefox/6.0 Wed Sep 21 15:01:59 2011
c4:17:fe:d4:a3:6c Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR Wed Nov 16 10:00:43 2011
c4:17:fe:b7:60:cf Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 Fri Oct 28 13:40:01 2011
c0:f8:da:63:68:bb Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.307 Fri Oct 28 13:51:39 2011
c0:cb:38:93:23:7c Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.102 Safari/535.2 Fri Oct 28 16:42:28 2011
c0:cb:38:22:b1:bf Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.307 Thu Nov 3 17:33:51 2011
08:11:96:1b:1b:e0 Windows-RSS-Platform/2.0 (MSIE 8.0; Windows NT 6.1) Wed Nov 9 14:05:02 2011