topic ise update oui in Network Access Control

ise update oui

edondurguti — Mon, 11 Mar 2019 02:34:33 GMT

How does one update OUIs in ISE? ie new iphone doesn't come up as an apple device.

ise update oui

Tarik Admani — Fri, 21 Sep 2012 21:01:30 GMT

Hi,

ISE gets the OUI update from the ieee database, you have to make sure that the updates are set to running or that you perform an update manually when troubleshooting these issues.

You can google the oui.txt file from the ieee webstie and see if the OUI has been published to apple.

Thanks,

Tarik Admani
*Please rate helpful posts*

ise update oui

bjorn.askendal — Mon, 08 Oct 2012 14:54:23 GMT

Im having the same problem.

Some of our iPhones ends up with unknown OUI and I cant seem to find where I update the OUI datebase, could provide me with this information?

Thanks

Björn

ise update oui

edondurguti — Mon, 08 Oct 2012 15:14:09 GMT

are you talking about new iphones?

ise update oui

bjorn.askendal — Mon, 08 Oct 2012 15:24:42 GMT

Yes they are pretty new, 1 - 2 months i would say, however, the ISE installation is just a week old.

When I check the endpoint in ISE, the OUI are UNKNOW but just for a few iphones, most of them work just fine and gets profiled as an apple-iphone.

These few however gets profiled after a long while as Workstations.

Björn

Re: ise update oui

edondurguti — Mon, 08 Oct 2012 15:35:25 GMT

I've had the same problem with IPHONE 5 the new ones that came out couple of days ago.

For some reason that would be identified as workstation - could you paste your endpoint iphone profiled as workstation to see what criteria has been used.

I was so desperate and I've created a user-aget string that seems to come from iphones ( I do use http profiling in wlc 7.3)

User-Agent

CaptiveNetworkSupport-209.31 wispr

for some reason thats whta iphones do, it's wierd and Idk if ieee updated apple database or if ise is updating it.

If it's only a few you can create static entries for them.

Re: ise update oui

Nicholas Copeland — Mon, 08 Oct 2012 15:38:03 GMT

There seems to be an issue with iOS 6 devices. I have a case with TAC currently looking into it. If you look at the endpoint information it recognizes that the device is an Apple device and is using a an Apple user agent. But it still registers as unknown. I am having it on several ISE deployments running both 1.1.1 and 1.1 code.

Sent from Cisco Technical Support iPad App

Re: ise update oui

edondurguti — Mon, 08 Oct 2012 15:40:08 GMT

Thanks for your input,

Could you please provide update on what TAC comes up with.

FYI the iphone even uses the hostname (iPhone) which should profile it as apple-iphone (OUI = UNKNOWN) but doesn't work.

I'd really appreciate if you can update what TAC comes up with.

thanks

Re: ise update oui

Nicholas Copeland — Mon, 08 Oct 2012 15:58:23 GMT

I will let you know what I hear back from TAC. This also effects iPads on iOS 6. Not sure yet about the new Mac OS.

Sent from Cisco Technical Support iPad App

ise update oui

Tarik Admani — Tue, 09 Oct 2012 02:21:12 GMT

I have seen this issue before, the updates for the oui come from this link:

http://standards.ieee.org/develop/regauth/oui/oui.txt

If this txt file doesnt have the OUI information, then the IEEE is holding up this process. Not much ISE can do outside of adding a custom condition to profile the device.

Thanks,

Tarik Admani
*Please rate helpful posts*

ise update oui

bjorn.askendal — Tue, 09 Oct 2012 06:47:15 GMT

Tarik Admani, its just that our iPhones has OUI's thats in ieee list

74-E2-F5   (hex)          Apple Inc
74E2F5     (base 16)          Apple Inc
                    1 Infinite Loop
                    Cupertino CA 95014
                    UNITED STATES

Would it be possible to force an update of this list? if its just that the list is outdated in the ISE and nothing with the TAC problem mentioned above ?

Re: ise update oui

Nicholas Copeland — Wed, 10 Oct 2012 13:15:02 GMT

There is apparently a feed service coming in the 1.2 update that will alleviate some of the OUI issues. It will automatically update ISE with the new OUI's when they come out. Still looking into the issue as I am not sure why it doesn't show up as an apple-device with the information it does pull. Also doesn't explain why iPads running iOS 5 worked until they were upgraded.

Sent from Cisco Technical Support iPad App

ise update oui

Tarik Admani — Wed, 10 Oct 2012 13:17:45 GMT

Hi,

Did you check the user agent string to see if that wasnt changed, I know this was an issue when the iOS5 was released. Also the if you are using the default profiling policies, the parent policy is the apple oui check, the apple ipad checks are nested within. You can always go the profiling policy and set the parent policy to none and retest.

Thanks,

Tarik Admani
*Please rate helpful posts*

Re: ise update oui

Nicholas Copeland — Wed, 10 Oct 2012 21:52:31 GMT

So I added some conditions to the Apple-Device rule to increase certainty. It now comes up as an apple device consistently. I tried removing the parent device for the iPad and iPhone but it wouldn't consistently stay as an iPhone or iPad. Will try making some additional rules for the iPhone and iPad to see if that helps.

Sent from Cisco Technical Support iPad App

Re: ise update oui

DANIEL FERREIRA — Tue, 16 Oct 2012 16:53:13 GMT

Hi all,

I'am having the same issue with new iPhones 5 (not version 5). They are being classified was "Endpoint OUI - Unknown". Anyone know how to update the OUI in the ISE for the new iPhones

Thanks,

Daniel

ise update oui

Nicholas Copeland — Tue, 16 Oct 2012 19:49:11 GMT

You can't update the OUI currently. You have to wait for a patch or new version that has an updated OUI in it. In the 1.2 release there will be a feature that will allow for automatic updates. As of right now you will need to modify your profiling conditions for each profiled device for the new iPhones and iPads with iOS 6. Remember that it needs to be identified under the parent device before it will profile as an iPad or iPhone. Or you can do like Tarik mentioned and remove the parent group for these devices and just play with the profiling conditions until you get the devices to consistently profile as an iPhone.

ise update oui

David Boos — Thu, 28 Mar 2013 02:04:53 GMT

Has this been resolved? I'm having this issue - iOS6 showing up as a workstation and not as an Apple device.

ise update oui

Nicholas Copeland — Thu, 28 Mar 2013 12:45:43 GMT

David this has been resolved in the latest patches and latest code version for the iOS6 devices. Still waiting on 1.2 for the automatic updates. What version of code are you running on your controllers and on ISE?

ise update oui

David Boos — Thu, 28 Mar 2013 14:40:13 GMT

On my ISE appliance I am running version 1.1.3.124 and on my WLC I am running 7.4.100.0. Windows 7 comes back but Android and iOS report back as workstations.

Have any insight to when 1.2 will be available?

ise update oui

Nicholas Copeland — Thu, 28 Mar 2013 15:48:58 GMT

The info I got back from the BU recently is that it looks like June now for 1.2. So it's going to be a little bit.

Do you have the DHCP and HTTP profiling settings enabled on your SSID? You shouldn't have any issues on 1.1.3 with profiling unless the DHCP/IP mappings aren't happening properly. I assume that you have already enabled the profiling services on your ISE node. If so then it looks like you are having issues with the DHCP/IP mapping. Make sure that DHCP proxy is disabled on the controller and that you have the profiling services enabled on the SSID and then give it another shot.