ISE and MobileIron

[sampathss]

ISE Version 2.1 P3

MobileIron Version - VSP 5.9.2 Build 11 (Branch boise-vsp-5.9.2)

Mobile Iron successfully integrated with ISE.

Phone shows up in MobileIron.

Using the MDM attribute DeviceRegisterStatus equals Registered in the policy set.

When connecting to the respective wireless network, it's not hitting the corresponding MDM policy at all and goes to default as it's not matching anything.

The log shows the following:

cisco.cpm.mdm.api.MdmClient -::::- getMacList: device with mac: , phoneIdType: UNKNOWN, phoneId: null  not found in MDM Server: MobileIron.

Any idea what might be going wrong here? It looks like ISE is sending the query to MDM, but seeing the above error. Does this also mean the device is not registered properly or MDM not seeing it as registered?

Thanks

Sampath

[hslai]

Assuming you removed MAC address from the log entry, it appears searching by the endpoint MAC address and not finding it.

[sampathss]

Yes, the mac address was removed on the above log entry. Is there a way to add the Mac address of the respective device into Mobile Iron?

The customer is registering their phone using Users which is synced with their LDAP server. Not sure why they are doing that way. But doing that way would be causing the issue of not able to finding the device?

[hslai]

MobileIron MDM needs to get the MAC addresses of the devices.

Apple MDM Protocol Reference… shows the payloads may contain an AccessRights of 32 to allow query of the Network Infomation (phone/SIM numbers, MAC addresses).

Please ask the customer to consult with MobileIron if needing instructions how to set that up.

[sampathss]

Hsing,

I have asked the customer to open a support ticket on the mobile iron side as well.

By any chance, is there any internal document that shows the method of registering the device into Mobile iron?

Thanks

Sampath

[hslai]

In the past, we used MobileIron Mobile@work app to enroll endpoints.

This 2013 CVD should still have some helpful info -- https://marketplace.mobileiron.com/servlet/servlet.FileDownload?file=00P3400000wVm2VEAS

[sampathss]

We used this doc initially to get it Integrated. But could not get help from this doc with the current issue.