Description
This article describes the steps to verify the presence of a particular OUI and its associated Registration Type in the database.
FortiNAC verifies the legitimacy of a device's MAC address during the registration process. The MAC address vendor OUI must be registered with IEEE to be considered valid. If the OUI cannot be validated, the device fails registration with the error 'Invalid Physical Address'.
Search for Vendor OUI list in FortiNAC UI:
- In the Administration UI, navigate to the Vendor OUIs view.
Version 9.1: Network -> Settings -> Identification -> Vendor OUIs.
Versions 9.2 - 9.4 & F 7.2 - F 7.6: System -> Settings -> Identification -> Vendor OUIs.
- From the Add Filter drop-down menu, select Vendor OUI.
- In the Vendor OUI field, enter the first 3 octets of the device’s Physical Address in the hexadecimal format ##:##:## (For example, 00:1D:09).
- Select Update.
If the OUI is already in the database, the associated Vendor Name, Vendor Alias, Role, Registration Type, and Registration Override values will display (if any). If the OUI displays but registration continues to fail with the same error, there may be other adapters associated with the same host record that are not valid. See this KB article: Technical Tip: Host fails to register or multiple host records are created.
If an OUI is not in the database, 'No records found' will appear in the results section. If this occurs, confirm the OUI has been registered with IEEE:
https://standards-oui.ieee.org/oui/oui.txt
If not found in IEEE, then the OUI is not registered.
Scope
Versions: 9.x, F 7.2, F 7.4, F 7.6.
Solution
OUI is not listed in UI but is registered with IEEE: Run Auto-Definitions update to obtain the latest OUIs and anti-virus definitions.
- Navigate to System -> Scheduler.
- Select Auto-Definition Synchronizer and select Run Now. For additional details on this task, see Auto-definitions updates in the Administration Guide.
- Once the update is complete, verify that the OUI is now listed in the Vendor OUIs view.
If OUI is still not found, Auto-Definition updates may not be completed. Verify that FortiNAC can reach the update server using the Test button under System -> Settings -> System -> Updates. If the test is successful, auto-definitions may be configured for a delayed schedule. See the System update in the Administration Guide.
Contact Support for additional assistance.
Workaround:
See this related article: Technical Tip: Add a Vendor OUI Manually.
