Using class to match iPhones, Wiis etc

[Glenn Satchell]

>From: "Mark S. Turczan" <mturczan at nyp.org>
>Date: Fri, 08 May 2009 11:08:14 -0400
>
>On May 8, 2009, at 10:09 AM, Chuck Anderson wrote:
>
>> On Fri, May 08, 2009 at 08:48:14AM -0500, Peter Laws wrote:
>>> Randall C Grimshaw wrote:
>>>>
>>>> http://www.packetfence.org/dhcp_fingerprints.conf
>>>>
>>>> I will make a guess that it might be possible to set a QOS (cos)  
>>>> (dscp) priority on the dhcp traffic. Have you asked Cisco?
>>>>
>>>> Classifying the clients in DHCP isn't going to solve a load issue  
>>>> at the firewall.
>>>
>>> Not directly, but if we can give the hosts that sit in one place  
>>> (i.e.
>>> laptops) longer leases, it cuts down traffic that has to pass  
>>> through.
>>
>> Even better than matching on MAC address or Parameter Request List is
>> to use the Vendor Class Identifier, that's what it's there for.  E.g.,
>> for HP printers:
>>
>> class "Class-HP-JetDirect" {
>>        match if option vendor-class-identifier = "Hewlett-Packard  
>> JetDirect";
>>
>>        filename "hp-printer.cfg";
>>        next-server w.x.y.z;
>>        option hp-tftp-configuration-file "hp-printer.cfg";
>>        option hp-tftp-server w.x.y.z;
>> }
>
>Does anyone know what the VCI for iPhone/iTouch's are? I sniffed my  
>own iTouch requesting DHCP and the the only thing I see as a Client  
>Identifier is the following:
>
>Option Code: 61
>Option Length: 7
>Hardware Type: 1
>Hardware Address: 00:25:4b:66:cc:54

Add this to dhcpd.conf,then have a look in the leases file to see the values.

set vendor-string = option vendor-class-identifier;

eg for a Windows client I get:

lease 192.168.14.231 {
  starts 4 2009/05/07 14:46:34;
  ends 4 2009/05/07 18:46:34;
  tstp 4 2009/05/07 18:46:34;
  cltt 4 2009/05/07 14:46:34;
  binding state free;
  hardware ethernet 00:90:27:19:22:c2;
  uid "\001\000\220'\031\"\302";
  set vendor-string = "MSFT 5.0";
}

regards,
-glenn