Device fingerprinting cannot be enabled on same port as per-port tunneling node (PPTN). When the controller is not reachable, then the tunnel node server fallback local switching is configured for device fingerprinting to work.
If the client does not send the configured protocol, the fingerprinting cannot be completed.
HTTP fingerprinting works only when the traffic is received on
Port 80.
Client entries are automatically removed from the client status table after 30 minutes.
Device fingerprinting and PUTN cannot work together on the same port when the switch is enabled (globally, irrespective of VLAN configuration) with DHCP snooping.
If the fingerprinting policy is already applied on the ports and the client limit is changed, then the effect only applies for the runtime clients or after interface flap.