Due to this, a dual-SSID flow using MAC-in-SAN or BYOD_is_Registered condition will fail as the MAC address between the onboarding SSID and the secured SSID is different.

The MAC address of the client at the time of BYOD onboarding is embedded in the certificate that is returned to the client. The same problem applies to Bring Your Own Device (BYOD) systems, where employees and students are allowed to use their own devices to connect to organizational networks, provided that the devices comply with certain security requirements. Devices can be automatically updated to the latest configuration when they connect to the network, but random MAC addresses mean that they may no longer be recognized. MDM ensures that all devices have the same configuration, apps, security policies, and so on. These are used when deploying devices owned by the organization to employees or students. This can impact two key systems used by many organizations. The company says it can break Cisco Identity Services Engine (ISE) services as it uses MAC address lookup. Using a random MAC address breaks that – which most of us would consider to be a good thing – but it can also break device-management systems used in companies and educational establishments.Ĭisco explained the problem, which also applies to the same feature in Android 10. The potential problems result from the the fact that iPhone and iPads on the latest OS default to using a random MAC address when connecting to Wi-Fi networks …Īpple introduced the feature as a privacy protection, primarily against retailers who use MAC addresses to track customers who connect to their Wi-Fi networks.

Cisco has warned that an iOS 14 privacy feature can break some network setups used by corporations, schools, colleges, and retail chains.

Unable to join network mac address