WLC 2504 v8.3.150.0 updated MAC-OUI shows device type Unclassified

[sardarjion]

I have WLC 2504 with v8.3.150.0 and I updated the OUI file from https://standards-oui.ieee.org/oui/oui.txt and the update was successful. 

I ran below commands, and it shows up the updated info. 

(Cisco Controller) >show profiling policy summary

Number of Builtin Classification Profiles: 232
ID Name Parent Min CM Valid
==== ================================================ ====== ====== =====
0 2Wire-Device None 5 Yes
1 3Com-Device None 5 Yes
2 Aastra-Device None 5 Yes
3 Aastra-IP-Phone 2 10 Yes
4 Aerohive-Device None 10 Yes
5 Aerohive-Access-Point 4 20 Yes
6 American-Power-Conversion-Device None 10 Yes
7 Android None 30 Yes
8 Android-Amazon 7 40 Yes
9 Android-Amazon-Kindle 7 40 Yes
10 Android-Amazon-Phone 8 40 Yes
11 Android-Amazon-TV 8 40 Yes
12 Android-Asus 7 30 Yes
13 Android-Google 7 40 Yes
14 Android-Google-Glass 13 50 Yes
15 Android-HTC 7 40 Yes
16 Android-HTC-Phone 15 50 Yes
17 Android-HTC-Phone-One-S 16 60 Yes

--More-- or (q)uit
(Cisco Controller) >show profiling oui-string summary

Number of OUI Strings Available: 8866
OUI OUI-String
========== =================================================================
0x00308bb2 CISCO SYSTEMS, INC
0x0068974b SHENZHEN COSTAR ELECTRONICS CO. LTD.
0x000021b7 LEXMARK INTERNATIONAL, INC.
0x00d8bc59 SHENZHEN DAPU MICROELECTRONICS CO., LTD
0x00e45d37 JUNIPER NETWORKS
0x0044ecce JUNIPER NETWORKS
0x000057c1 LG ELECTRONICS (MOBILE COMMUNICATIONS)
0x0058b3fc SHENZHEN RF-LINK TECHNOLOGY CO.,LTD.
0x00883d24 GOOGLE, INC.
0x00f06e0b MICROSOFT CORPORATION
0x0024f27f HEWLETT PACKARD ENTERPRISE
0x00188090 CISCO SYSTEMS, INC
0x00aced5c INTEL CORPORATE
0x0070df2f CISCO SYSTEMS, INC
0x00a87e33 NOKIA DANMARK A/S
0x00c43dc7 NETGEAR
0x00709e29 SONY INTERACTIVE ENTERTAINMENT INC.
0x0000215d INTEL CORPORATE
Warning: Output is too long and has been truncated

I have few Wiz lights whose start of the MAC address matches in the OUI file but the device type still shows "Unclassified". 

(Cisco Controller) >show client summary devicetype

Number of Clients................................ 13

MAC Address AP Name Status Device Type
----------------- ---------------- ------------- --------------------------------
a8:bb:50:85:ac:5d 2702_1 Associated Unclassified
a8:bb:50:9b:08:5e 2702_1 Associated Unclassified
a8:bb:50:ac:71:e3 2702_1 Associated Unclassified

 I see the entry in the uploaded OUI file for these mac addresses.

A8BB50 (base 16) WiZ IoT Company Limited

I did restart the WLC for the changes to take effect. 

[ammahend]

can you generate some http traffic from the client so that WLC can see user agent information and see if anything changes

[sardarjion]

These are light bulbs so I can just turn on and off or change colors which internally generate HTTP traffic. These lights have been connected to WLC for almost a month now and have been using them on daily basis after OUI file update also. 

[Rich R · Accepted solution]

Same mistake I made a few years back - clarified by TAC case...
Uploading a new OUI file does *not* add new entries - it only updates existing entries.
The only way to get a new OUI database is to upgrade the software.
And Cisco does not use the entire OUI file on AireOS - only a limited subset.
Alternatively use ISE to do the profiling instead of the WLC built-in database.

[sardarjion]

---

@Rich R wrote:

The only way to get a new OUI database is to upgrade the software.

Do you mean the WLC software? If yes, I tried moving to 8.5.182 which was released on 31-Aug-2021 and also didn't solve the problem. 

[Scott Fella]

So since you have upgraded, there is not much you can do. Like what Rich mentioned, only certain entries are used and uploading the OUI only updates the existing not add what ever is missing.

[Rich R]

2504 can't be upgraded to 8.10, and that would still only provide an incomplete set of OUI because as mentioned already Cisco only uses a partial subset of the OUI's in AireOS,
So your only other option for more complete coverage is to use ISE to do the profiling:
https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/per_wlan_wireless_settings.html#client-profiling
With ISE you can subscribe to profiling data feed updates which are updated regularly so should provide much more complete and accurate coverage.

[sardarjion]

Thanks Rich for the clarification. ISE is an overkill for my small home setup where I need a dedicated machine to run the virtual software. 

Is there a way to download the OUI file which exists on WLC 2504? Running show profiling oui-string summary doesn't print all the entries on the console. 

[Rich R]

> Is there a way to download the OUI file which exists on WLC 2504? Running show profiling oui-string summary doesn't print all the entries on the console. 
Not that I know of.  We don't see that problem on 8510 even with older code so it must be specific to 2504.

[Scott Fella]

Like what Rich mentioned, I think a lot of folks ran into that issue also and found out that not all entries are used.  The 2504 is also old and I also do have on in my home lab and that still doesn't show devices especially new devices.  It just something you get use to, I have other controllers that are still supported and also the 9800's and at times, my devices show up when I upgrade the image.  The 2504 is end of support so you will not see any new images unless they have a security patch.  I don't even know if that is still being supported.