I'm running PI 3.1.3 with device pack 3.1.4, and have many useless entries in client and user monitoring tool with MAC address field to unknown.
I tried to delete but need to do one by one ...
Is any of you have the same behaviour and found any containment ?
|MAC Address,Client Host Name,IP Address,IP Type,User Name,Type,Vendor,Location,Device Name,Interface,VLAN,Protocol,Status,Association Time,Port Description|
|Unknown,Unknown,,Not Detected,Unknown,Wired,Unknown,Unknown,C4507-,Gi2/24,0,802.3,Disassociated,05-Oct-2016 13:57:13 CEST,|
|Unknown,Unknown,,Not Detected,Unknown,Wired,Unknown,Unknown,C4507-,Gi2/24,0,802.3,Disassociated,11-Oct-2016 15:50:29 CEST,|
|Unknown,Unknown,,Not Detected,Unknown,Wired,Unknown,Unknown,C4507-,Gi2/24,0,802.3,Associated,18-Oct-2016 11:14:42 CEST,|
Is this data that you're collecting via the API?
No this is just a copy paste from Gui but entries are also present in with collect through API.
Now I also have some entries with vlan ID to "0".
Also have troubles with client discovery on trink option, cisco to cisco trunk are not filtered and this is giving soem unconssistent entries in client monitoring, showing for example a server connected to cisco to cisco trunk. these entries should be filtered to be sure that only access ports are included and not infrastructure ports ( I mean Cisco to Cisco) in client discovery process.
Thanks for your advice, I've done this, for time being still unknown MAC entries, I will keep updated in few next days to see if there is any progress.
Have you try to update your OUI database ?
I had the same issue and the update resolve most of the unknown.
Go to Administration / Settings / System Settings/ Client and user / Upload OUI and choose the online IEEE option.
The update took 15 minutes.
Please check your switch IOS version, I think you are running IOS 15.0 in switches.
If m I right. update IOS version 15.0 to 15.2 in one switch then check