Wireless Access

Can 802.1x authentication block access based on device operating system such as android and Apple IOS or windows?

use DHCP finger-printing

and to block such things you need to have PEF license.

refer to this document: http://www.arubanetworks.com/wp-content/uploads/AOS-DHCP-FingerPrint-AppNote.pdf

I have create User Rules as attached screen capture. But those Apple iOS and Android user still get the "Authenticated" role instead of "BYOD_Deny" role. Which iOS and Android device still "Authenticated" role from 802.1x Authentication Default Role.

I already define the User Derivation Rules under "AAA Profile". 

Please advise. 

---

@jordontin wrote:

I have create User Rules as attached screen capture. But those Apple iOS and Android user still get the "Authenticated" role instead of "BYOD_Deny" role. Which iOS and Android device still "Authenticated" role from 802.1x Authentication Default Role.

 

I already define the User Derivation Rules under "AAA Profile". 

 

Please advise. 

---

Are you sure you have it attached to the correct AAA profile?

Yes, it was attach to correct AAA profile. Because for windows laptop it can get the role for "User Derivation Rules" but for Apples iOS and Android device was not.

Ok. later i will try on that and will update the status.

Manage to block base on OS type by adding some Android DHCP fingerprinting as below website link:

http://www.educause.edu/discuss/networking-and-emerging-technologies/wireless-local-area-networking-constituent-group/aruba-dhcp-fingerprinting