iOS IP Conflicts

[TimBisel]

I have multiple sites sending alerts for IP conflicts recently. It is only iPhones, and only on our wireless. I have SSIDs and a VLAN setup dedicated just to mobile phones, and the MX running as DHCP server for that VLAN. This was not an issue until two or three weeks ago but we are getting two to three alerts for different sites almost every day. Anyone have any idea where to start looking on how to fix this? Is this another iOS bug?

[BRUCE NEWTON]

If you had policy applied directly to an iOS device and they update to iOS 14 then you’ll see the ‘old’ device (I.e. the device’s real MAC) will never connect to the SSID again, and it will appear as a ‘new’ device (I.e. using its randomised MAC). So yes you will need to re-apply policies to the devices. The only way you can avoid this is if you can get the users to turn of MAC randomisation, or turn it off using an MDM (if you’re using one).

[alexapie]

Fair warning too, that devices with policies do not age out after 30 days continual of inactivity like those without them do either, so you may end up having to deal with cleaning up old policy entries as a result of this.

[alexapie]

The 14.2 update will only fix the duplicate IP alert issue - it will not change anything else as far as we're aware

[akeshwani]

Is there an ETA for the 14.2 release?

[Blake-M]

It looks like iOS 14.2 is expected before 11/13/2020.

https://www.gottabemobile.com/ios-14-release-date/

[BRUCE NEWTON]

Its being pushed now - received the update notification for 14.2 on my iOS device yesterday.

[TimBisel]

I really am starting to hate this company. To add to the trouble, Apple has released the update. And its getting flagged by Meraki and AMP as malware.... So the alerts have just begun... Yippy!

File downloads as
86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip

From:
http://updates-http.cdn-apple.com/2020FallFCS/mobileassets/001-62165/F4052D84-DC41-414E-90A4-7E6E9715DD7C/com_apple_MobileAsset_SoftwareUpdateDocumentation/86ea5441393e1f0b96656bb5ad56364b308b7ca6.zip

And is identified in AMP for Endpoints as:
W32.6B9A473044-95.SBX.TG

With SHA of:
6b9a47304497324fe40e3ccfba43bbb056c152500550849d1597fc47b4ebab35