Tags

,

Starting IOS-XE 17.6.x release (11ac Wave 2 & Catalyst APs only) Cisco started supporting device Analytics with Intel as well (Previously supported for Apple & Samsung devices). It is supported with Intel AC8561, AC9560, AX200, AX201, AX210, AX211, AX1650, AX1675 with driver version 22.50.1 onwards.

When you configure a WLAN Profile it is enabled by default. It is a feature only supported in Cisco 9800 (not available with AireOS WLCs). Below shows the WLAN Advanced configurations that show where this setting is configured.

In CLI, if you check in the “show run” configuration you will not see that specific configuration as it is part of the default configuration. You have to use “show run all” to see those config lines in CLI.

C9800-1#sh run | sec wlan
wlan MRNX 21 MRNX
 ccx aironet-iesupport
 no chd
 radio dot11a
 radio policy dot11 5ghz
 security ft
 security wpa akm ft dot1x
 security dot1x authentication-list RAD-AUTH
 security pmf optional
 wmm require
 mbo
 no shutdown


C9800-1#sh run all | sec wlan
wlan MRNX 21 MRNX
 no assisted-roaming dual-list
 assisted-roaming neighbor-list
 no band-select
 broadcast-ssid
 bss-transition
 no bss-transition disassociation-imminent
 bss-transition disassociation-imminent oproam-timer 40
 bss-transition disassociation-imminent timer 200
 no bss-transition dual-list
 bssmaxidle
 no bssmaxidle protected-mode
 ccx aironet-iesupport
 no channel-scan defer-priority 4
 channel-scan defer-priority 5
 channel-scan defer-priority 6
 channel-scan defer-time 100
 no chd
 client association limit ap 0
 client association limit radio 200
 client association limit 0
 no client-steering
 device-analytics
 no device-analytics export
 device-analytics pc-analytics
 dms
 dot11ax
 dot11ax downlink-mumimo
 dot11ax downlink-ofdma
 dot11ax target-waketime
 dot11ax twt-broadcast-support
 dot11ax uplink-mumimo
 dot11ax uplink-ofdma
 dtim dot11 24ghz 1
 dtim dot11 5ghz 1

When “device-analytics export” is configured, information from Cisco 9800 & AP details are shared with compatible clients (eg Samsung devices). Once you configure a WLAN on 9800 (as device-analytics enabled by default), it advertises this capability in a Vendor-Specific Information element (#44) in Beacon or Probe Responses frame. Since data is encrypted (AES-256-CBC) within this IE you cannot decode all the details in a protocol analyzer like Wireshark. If you enable Cisco Adaptive 11r, compatible clients (Apple iOS devices, Intel & Samsung) get to know WLAN support 11r through this IE information. If you enable Fastlane+ (for 802.11ax Apple clients) that also uses the same information element to inform clients of such capability. Below shows the information element advertised on a Beacon frame on a SSID (MRNX) configured on my 9800.

You can view Intel PC Analytics data on GUI or CLI. In GUI, “Monitor > Clients > General > Client Properties” you should be able to see the details like Device Vendor, Intel Driver Version, is device powered, Wi-Fi NIC Hardware model,Device OS, etc

If you go to the “Client Statistics” section you will see the information shared by clients. In this example, you will see the client reports its neighbor info with RSSI (as the client sees based on its Rx Sensitivity as opposed to what AP estimate). Also reporting on frames got invalid IE, APs not responding to client frames, etc.

You can verify client PC Analytics details using the “show wireless client mac-address <> detail | be Device” output. Note that the below CLI output from my lab WLC & does not match the above GUI output which I have taken from a different WLC.

Device Classification Information:
  Device Type      : Dell Inc. Latitude 5400
  Device Name      : INTEL CORPORATE
  Protocol Map     : 0x000401  (OUI, DOT11)
  Device OS        : Windows 10
  Device Protocol  : DOT11
    Type             : 0    27  
    Data             : 1b
    00000000  00 00 00 17 44 65 6c 6c  20 49 6e 63 2e 20 4c 61  |....Dell Inc. La|
    00000010  74 69 74 75 64 65 20 35  34 30 30                  |titude 5400     |
    Type             : 1    16  
    Data             : 10
    00000000  00 01 00 0c 32 32 2e 31  35 30 2e 30 31 2e 30 31  |....22.150.01.01|

    Type             : 3    5   
    Data             : 05
    00000000  00 03 00 01 30                                    |....0           |
    Type             : 4    14  
    Data             : 0e
    00000000  00 04 00 0a 57 69 6e 64  6f 77 73 20 31 30         |....Windows 10  |
    Type             : 6    13  
    Data             : 0d
    00000000  00 06 00 09 44 65 6c 6c  20 49 6e 63 2e            |....Dell Inc.   |
    Type             : 7    17  
    Data             : 11
    00000000  00 07 00 0d 4c 61 74 69  74 75 64 65 20 35 34 30  |....Latitude 540|
    00000010  30                                                |0               |
    Type             : 8    14  
    Data             : 0e
    00000000  00 08 00 0a 41 43 20 50  6f 77 65 72 65 64         |....AC Powered  |
    Type             : 9    16  
    Data             : 10
    00000000  00 09 00 0c 41 58 32 30  30 20 31 36 30 4d 48 7a  |....AX200 160MHz|

    Type             : 10   5   
    Data             : 05
    00000000  00 0a 00 01 33                                    |....3           |
Max Client Protocol Capability: Wi-Fi6 (802.11ax)
WiFi to Cellular Steering : Not implemented
Cellular Capability : N/A
Advanced Scheduling Requests Details:
  Apple Specific Requests(ASR) Capabilities/Statistics:
    Regular ASR support: DISABLED


C9800-1#show device classifier mac-address f8e4.e372.6cda detail 
Client Mac: f8e4.e372.6cda
  Device Type: Dell Inc. Latitude 5400
  Confidence Level: 40
  Day Zero Classification: Dell Inc.
  Device Name: INTEL CORPORATE
  Software Version: 22.150.01.01
  Device OS: Windows 10
  Device Vendor: Intel
  Power Type: AC Powered
  Hardware Model: AX200 160MHz

Here are my Lenovo PC client details, as you can see it does not give all the information that I was able to see on my Dell Laptop. It is due to the driver version of the Lenovo PC

C9800-1#sh wireless client summary                             
Number of Clients: 2

MAC Address    AP Name                                        Type ID   State             Protocol Method     Role
-------------------------------------------------------------------------------------------------------------------------
f4a4.75a3.c8b1 AP2-C9130                                      WLAN 21   Run               11ax(5)  Dot1x      Local             
f8e4.e372.6cda AP2-C9130                                      WLAN 21   Run               11ax(5)  Dot1x      Local             

C9800-1#show wireless client mac-address f4a4.75a3.c8b1 detail
Device Classification Information:
  Device Type      : LENOVO 20WNS10L00
  Device Name      : INTEL CORPORATE
  Protocol Map     : 0x000401  (OUI, DOT11)
Max Client Protocol Capability: Wi-Fi6 (802.11ax)
WiFi to Cellular Steering : Not implemented
Cellular Capability : N/A
Advanced Scheduling Requests Details:
  Apple Specific Requests(ASR) Capabilities/Statistics:
    Regular ASR support: DISABLED

C9800-1#show device classifier mac-address f4a4.75a3.c8b1 detail 
Client Mac: f4a4.75a3.c8b1
  Device Type: Intel-Device
  Confidence Level: 5
  Day Zero Classification: INTEL CORPORATE
  Device Name: INTEL CORPORATE

Once I upgraded my PC Intel AX201 driver I was able to get the data.

Device Classification Information:
  Device Type      : LENOVO 20WNS10L00
  Device Name      : INTEL CORPORATE
  Protocol Map     : 0x000401  (OUI, DOT11)
  Device OS        : Windows 10
  Device Protocol  : DOT11
    Type             : 0    21  
    Data             : 15
    00000000  00 00 00 11 4c 45 4e 4f  56 4f 20 32 30 57 4e 53  |....LENOVO 20WNS|
    00000010  31 30 4c 30 30                                    |10L00           |
    Type             : 1    16  
    Data             : 10
    00000000  00 01 00 0c 32 32 2e 31  38 30 2e 30 32 2e 30 31  |....22.180.02.01|

    Type             : 3    5   
    Data             : 05
    00000000  00 03 00 01 30                                    |....0           |
    Type             : 4    14  
    Data             : 0e
    00000000  00 04 00 0a 57 69 6e 64  6f 77 73 20 31 30         |....Windows 10  |
    Type             : 6    10  
    Data             : 0a
    00000000  00 06 00 06 4c 45 4e 4f  56 4f                     |....LENOVO      |
    Type             : 7    14  
    Data             : 0e
    00000000  00 07 00 0a 32 30 57 4e  53 31 30 4c 30 30         |....20WNS10L00  |
    Type             : 8    14  
    Data             : 0e
    00000000  00 08 00 0a 44 43 20 50  6f 77 65 72 65 64         |....DC Powered  |
    Type             : 9    16  
    Data             : 10
    00000000  00 09 00 0c 41 58 32 30  31 20 31 36 30 4d 48 7a  |....AX201 160MHz|

    Type             : 10   5   
    Data             : 05
    00000000  00 0a 00 01 33                                    |....3           |
Max Client Protocol Capability: Wi-Fi6 (802.11ax)
WiFi to Cellular Steering : Not implemented

You can use “show device classifier mac-address <> detail” CLI command to get the device classification details as shown below.

C9800-1#sh device classifier mac-address f4a4.75a3.c8b1 detail 
Client Mac: f4a4.75a3.c8b1
  Device Type: LENOVO 20WNS10L00
  Confidence Level: 40
  Day Zero Classification: LENOVO
  Device Name: INTEL CORPORATE
  Software Version: 22.180.02.01
  Device OS: Windows 10
  Device Vendor: Intel
  Power Type: DC Powered
  Hardware Model: AX201 160MHz

You can verify PC Analytics-related stats for a given client using “show wireless client mac-address < > stats pc-analytics” CLI command as well (in GUI Monitor > Clients > General > Client Statistics” as discussed earlier in the post) .

WLC4#sh wireless client mac-address 70a8.d3d7.7d69 stats pc-analytics 
-------------------------
Neighbor APs Info:
-------------------------
Reported time:: 03/02/2023 07:16:24
-------------------------
Roaming Reasons:
-------------------------
Selected AP RSSI:: -69
Candidate BSSIDs:
-----------------
Neighbor AP                      RSSI(dB)
2c57.4153.fec0                   -81 
2c57.4159.9180                   -81 
-------------------------
Failed AP Report:
-------------------------
Last Reported Time:: 03/02/2023 07:16:24
APs with Invalid IEs: None
APs not sending response:
-------------------------
BSSID                            Frame Type
70e4.22b0.04be                   Authentication Response
70e4.2292.def1                   Authentication Response
2c57.4153.6600                   Other Frame types      
70e4.22b8.8aee                   Other Frame types      
70e4.22bd.81de                   Other Frame types      
-------------------------
PC Analytics report stats
-------------------------
----------------------------------------------------------------------
    Report Type            Processed Reports          Dropped Reports
----------------------------------------------------------------------

    STA Info                      1                             0
    Neigh AP                      1                             0
    Low RSSI                      0                             0
    Beacon Miss                   0                             0
    Failed AP                     1                             0
    Unknown APs                   0                             0

If it is not an Intel adapter, you have Device classification information. Here is my Lenovo laptop connect to my SSID using an external Netgear USB adapter.

C9800-1#show wireless client mac-address 9418.653d.747d detail | be Device
Device Classification Information:
  Device Type      : Netgear-Device
  Device Name      : NETGEAR
  Protocol Map     : 0x000001  (OUI)
Max Client Protocol Capability: Wi-Fi6 (802.11ax)
WiFi to Cellular Steering : Not implemented
Cellular Capability : N/A
Advanced Scheduling Requests Details:
  Apple Specific Requests(ASR) Capabilities/Statistics:
    Regular ASR support: DISABLED

You won’t get any PC Analytics data in this case

C9800-1#sh wireless client mac-address 9418.653d.747d stats pc-analytics

In summary, if you have Cisco 9800 with 17.6.x firmware version or higher, then you already should have valuable information available to troubleshoot Intel Client Devices in your environment.

Here are some press releases, FAQ & podcasts talking about the Intel Analytics feature release

1. Intel Connectivity Analytics FAQ
2. Intel Connectivity Analytics with Cisco
3. Cisco & Intel: Secrets Revealed (Cisco Insider series for Network Podcast)
4. Cisco Press Release – Intel Analytics