Fortinet white logo
Fortinet white logo

Administration Guide

Device identity

Device identity

The Device Identity tab displays the Physical Address, Vendor Name, and DHCP fingerprint for selected Adapter. A separate record is added every time a new fingerprint is heard for a MAC. For example, if the adapter on a host is moved from a registration VLAN to a production VLAN and as a result requests a new IP address this creates a new record. If two records are displayed for the same MAC and port, but with different OSs, the host is most likely a dual-boot host. This generates the Device Fingerprint Changed event. This view is informational only.

Settings

Field

Definition

Physical Address

MAC address of the host interface or adapter.

Vendor Name

Manufacturer of the host. This is based on the Vendor OUI.

Learned Time

The first time a DHCP packet was heard by FortiNAC for this Physical address. This is not the time that the host connected to the network nor is it the time the host was created in the database.

Last Heard

The last time a DHCP packet was heard by FortiNAC for this host. Updated every time a DHCP packet with a matching identity is heard.

Host Name

The name for this host extracted from the DHCP packet.

Option List

Displays a list of option numbers from the DHCP packet used to provide information about the host.

Parameter List

Combination of parameters contained in the DHCP packet that allows FortiNAC to infer the Operating System for this host.

Vendor Class

Vendor Class Identifier extracted from the DHCP packet. Allows the DHCP server to return specific information based on the host's hardware type.

Device Type

Indicates the type of hardware detected.

Message Type

DHCP message type, including

  • Discover — Host broadcast initial DHCP request for an IP address.
  • Request — DHCP server has responded. Host requests an IP address from a specific DHCP server.
  • Passive — Generated when something about the DHCP fingerprint has changed since the last message, such as a different Operating System.

Operating System

Operating system of the host. If more that one record is displayed with different operating systems, this host may be dual boot.

Device identity

Device identity

The Device Identity tab displays the Physical Address, Vendor Name, and DHCP fingerprint for selected Adapter. A separate record is added every time a new fingerprint is heard for a MAC. For example, if the adapter on a host is moved from a registration VLAN to a production VLAN and as a result requests a new IP address this creates a new record. If two records are displayed for the same MAC and port, but with different OSs, the host is most likely a dual-boot host. This generates the Device Fingerprint Changed event. This view is informational only.

Settings

Field

Definition

Physical Address

MAC address of the host interface or adapter.

Vendor Name

Manufacturer of the host. This is based on the Vendor OUI.

Learned Time

The first time a DHCP packet was heard by FortiNAC for this Physical address. This is not the time that the host connected to the network nor is it the time the host was created in the database.

Last Heard

The last time a DHCP packet was heard by FortiNAC for this host. Updated every time a DHCP packet with a matching identity is heard.

Host Name

The name for this host extracted from the DHCP packet.

Option List

Displays a list of option numbers from the DHCP packet used to provide information about the host.

Parameter List

Combination of parameters contained in the DHCP packet that allows FortiNAC to infer the Operating System for this host.

Vendor Class

Vendor Class Identifier extracted from the DHCP packet. Allows the DHCP server to return specific information based on the host's hardware type.

Device Type

Indicates the type of hardware detected.

Message Type

DHCP message type, including

  • Discover — Host broadcast initial DHCP request for an IP address.
  • Request — DHCP server has responded. Host requests an IP address from a specific DHCP server.
  • Passive — Generated when something about the DHCP fingerprint has changed since the last message, such as a different Operating System.

Operating System

Operating system of the host. If more that one record is displayed with different operating systems, this host may be dual boot.