Dhcp; Sending Dhcp Traffic To Cppm; Clearpass Onboard; Http User-Agent - Dell Powerconnect W-ClearPass Hardware Appliances User Manual

HTTP User Agent
l
MAC OUI - Acquired via various authentication mechanisms such as 802.1X, MAC authentication, etc.
l
ActiveSync plugin
l
CPPM OnGuard
l
SNMP
l
Subnet Scanner
l

DHCP

DHCP attributes such as option55 (parameter request list), option60 (vendor class) and options list from
DISCOVER and REQUEST packets can uniquely fingerprint most devices that use the DHCP mechanism to
acquire an IP address on the network. Switches and controllers can be configured to forward DHCP packets such as
DISCOVER, REQUEST and INFORM to CPPM. These DHCP packets are decoded by CPPM to arrive at the
device category, family, and name. Apart from fingerprints, DHCP also provides hostname and IP address.

Sending DHCP Traffic to CPPM

Perform the following steps to configure your Dell W-Series Controller and Cisco Switch to send DHCP Traffic to
CPPM.
interface <vlan_name>
ip address <ip_addr> <netmask>
ip helper-address <dhcp_server_ip>
ip helper-address <cppm_ip>end
end
Notice that multiple "
than the DHCP server.

ClearPass Onboard

ClearPass Onboard collects rich and authentic device information from all devices during the onboarding process.
Onboard then posts this information to Profile via the Profile API. Because the information collected is definitive,
Profile can directly classify these devices into their Category, Family, and Name without having to rely on any other
fingerprinting information.

HTTP User-Agent

In some cases, DHCP fingerprint alone cannot fully classify a device. A common example is the Apple family of
smart devices; DHCP fingerprints cannot distinguish between an Apple iPad and an iPhone. In these scenarios,
User-Agent strings sent by browsers in the HTTP protocol are useful to further refine classification results.
User-Agent strings are collected from the following:
ClearPass Guest (Amigopod)
l
ClearPass Onboard
l
Dell W-Series controller through IF-MAP interface (future)
l
62
" statements can be configured to send DHCP packets to servers other
ip helper-address
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide