topic Re: iOS 9 with DPSK bug in Access Points - Indoor and Outdoor

iOS 9 with DPSK bug

greg_ashe — Mon, 21 Sep 2015 14:56:44 GMT

We have DPSK set up with Roles and are using the Specify OS Types option and have the Apple iOS selected it seems that devices recently upgraded to iOS 9 experience difficulty connecting to WLAN - it shows up as Authorized(Deny) under Active Clients. By changing to Allow All OS this problem disappears. Anyone else run into this?

Re: iOS 9 with DPSK bug

andrew_bailey_7 — Tue, 22 Sep 2015 20:43:51 GMT

Greg,

Yes, I've seen this too.

I've not got any "Specify OS Types" enabled but I can see that all my iOS devices no longer have their OS recognized following the upgrade to iOS9. The Pie charts on the dashboard are also showing them as "unknown" devices.

I've updated today to 9.12 MR1 and the behavior hasn't changed- possibly something for next release? I guess Apple may have changed the OS "signature" in some way?

Kind Regards, Andy.

Re: iOS 9 with DPSK bug

martin_kane — Tue, 22 Sep 2015 21:43:38 GMT

Ditto - except I'm stuck with 9.8 because of EOL for 7962 😞

Re: iOS 9 with DPSK bug

Anusha_Vemula — Wed, 23 Sep 2015 09:18:56 GMT

Hi All,

iOS9 devices are not sending the OS related information in the DHCP discover/request packet and our Controllers(ZD/vSCG/SCG-200/SZ-100) are unable to detect the iOS devices with version 9. So, these devices as being considered as Other 'OS' type devices.

There is no Vendor Class Identifier packet in DHCP discover/request packet with DHCP option 60.

- If users are being assigned with a Role where RBAC(Role Based Access Control) is selected to allow specific OS type users, then choose the "Others" options also under OS types in that particular Role.

- If Device Access Policy is tagged on the WLAN, then change the Default Mode to "Allow all by default" on that particular Device Access Policy Rule.

- Anusha

Re: iOS 9 with DPSK bug

andrew_bailey_7 — Wed, 23 Sep 2015 10:16:19 GMT

Anusha,

Thanks for describing the workarounds for this issue.

Is there likely to be (or is there) a plan to somehow resolve this issue?

Obviously iDevices represent the bulk of mobile devices in a lot of networks. Having them identified as "unknown" is clearly not great.....

Kind Regards,

Andy.

Re: iOS 9 with DPSK bug

monnat_systems — Wed, 23 Sep 2015 11:25:24 GMT

andy

its unlikely as Ruckus employs Passive fingerprinting which is currently dependent on DHCP requests from the host to share the info on their OS

they may have overhaul this feature and go for multiple techniques. Other techniques may involve sniffing:

IP TTL values;
IP ID values;
TCP Window size;
TCP Options (generally, in TCP SYN and SYN+ACK packets);
ICMP requests;
HTTP packets (generally, User-Agent field).

Re: iOS 9 with DPSK bug

monnat_systems — Wed, 23 Sep 2015 11:27:32 GMT

btw this is not really BUG on the Ruckus side, its just that apple is not sending info which is needed for OS fingerprinting to work. this must have impacted other OEMs too

Re: iOS 9 with DPSK bug

ken_yeh — Mon, 26 Oct 2015 19:45:10 GMT

This is troublesome for us as well, as we are unable to use device access policies for any iOS9 devices. It seems that this is certainly something that Ruckus can fix as iOS devices do send OS fingerprinting info using DHCP Option 55 parameters 1,121,3,6,15,119,252. From this Ruckus KB it appears that Ruckus supports DHCP Option 55 for client fingerprinting.

https://support.ruckuswireless.com/answers/000001668

I've seen that other competing products are able to ID iOS9 devices using DHCP Option 55; it just seems like the proper parameters have to be added for the recognition to occur.

Re: iOS 9 with DPSK bug

trung_ngheu — Tue, 03 Nov 2015 04:33:11 GMT

Can you tell me the soure support ruckus wireless ?
I also have problems related to this issue with the hidden SSID & L2MAC. 😞

Re: iOS 9 with DPSK bug

trung_ngheu — Tue, 03 Nov 2015 04:42:58 GMT

Can you tell me the soure support ruckus wireless ?
I also have problems related to this issue with the hidden SSID & L2MAC. 😞