简介
本文档介绍如何从思科全数字化网络架构(DNA)中心创建和提取根本原因分析(RCA)文件。
先决条件
要求
您必须拥有对Cisco DNA Center的CLI访问权限。要使用CLI登录Cisco DNA Center,您必须通过安全套接字外壳(SSH)连接到您的Cisco DNA Center的管理IP地址,其中maglev作为端口2222上的用户名。
在单节点群集中生成RCA文件
步骤1:登录端口2222上的Cisco DNA Center CLI。使用maglev作为用户名,除非在初始设置时修改了用户名。然后运行rca命令。
[Tue Sep 11 15:08:48 UTC] maglev@x.x.x.x (maglev-master-1) ~
$ sudo rca
[sudo] password for maglev:
===============================================================
Verifying ssh/sudo access
===============================================================
Done
===============================================================
Verifying administration access
===============================================================
[administration] password for 'admin':
User 'admin' logged into 'kong-frontend.maglev-system.svc.cluster.local' successfully
===============================================================
RCA package created on Tue Sep 11 15:32:47 UTC 2018
===============================================================
2018-09-11 15:32:47 | INFO | Generating log for 'date'...
tar: Removing leading `/' from member names
/etc/cron.d/
/etc/cron.d/clean-journal-files
/data/rca/maglev-x.x.x.x-rca-2018-09-11_15-32-40_UTC/docker_inspect_k8s_platform-ui_platform-ui-2963217120-rxv5d_maglev-system_1a09eb87-9f00-11e8-9d42-005d73c0c790_0.log
/data/rca/maglev-x.x.x.x-rca-2018-09-11_15-32-40_UTC/sudo_ethtool_calife1d52fff20.log
2018-09-11 15:43:14 | INFO | Cleaning up RCA temp files...
Created RCA package: /data/rca/maglev-x.x.x.x-rca-2018-09-11_15-32-40_UTC.tar.gz
[Tue Sep 11 15:43:14 UTC] maglev@x.x.x.x (maglev-master-1) ~
注:RCA文件生成并存储在/data/rca中。创建文件通常需要20分钟左右。文件名格式如下:maglev-<inter-cluster link IP address>-rca<date and time>.tar.gz。
在N节点群集中生成RCA文件
提示:当您拥有功能正常的n节点群集时,服务将进行分发。分发服务时,来自单个节点的RCA不会包含来自在其他节点上运行的服务的日志。例如,如果您有在节点–1上运行的服务A,并且从节点–2获得RCA,则不会包括来自服务A的日志。因此,建议在TAC请求RCA文件时捕获并包含集群中所有节点的RCA文件。
当您拥有3节点群集并在任何设备上运行rca命令时,Cisco DNA Center会提示您输入群集IP地址。在提示符处,输入要从中检索RCA的节点的群集间IP地址。
在本示例中,集群间IP地址属于10.1.1.0/29范围。
[Wed May 30 18:24:26 UTC] maglev@10.1.1.2 (maglev-master-10) ~
$ rca
===============================================================
Verifying ssh/sudo access
===============================================================
Done
===============================================================
Verifying administration access
===============================================================
Cluster: 10.1.1.3
[administration] username for 'https://10.1.1.3:443': admin
[administration] password for 'admin':
User 'admin' logged into '10.1.1.3' successfully
===============================================================
RCA package created on Wed May 30 18:24:44 UTC 2018
===============================================================
2018-05-30 18:24:44 | INFO | Generating log for 'date'...
tar: Removing leading `/' from member names
/etc/cron.d/
/etc/cron.d/run-remedyctl
运行rca命令后,您指定的群集间IP地址将缓存到/home/maglev/.maglevconf。下次运行rca命令时,Cisco DNA Center将使用同一节点获取RCA信息。
[Wed May 30 18:23:37 UTC] maglev@10.1.1.2 (maglev-master-10) ~
$ rca
[sudo] password for maglev:
===============================================================
Verifying ssh/sudo access
===============================================================
Done
===============================================================
Verifying administration access
===============================================================
[administration] password for 'admin': <type the admin password>
User 'admin' logged into '10.1.1.3' successfully <-- it automatically logged into the cluster previously defined as the inter-cluster IP address
===============================================================
RCA package created on Wed May 30 18:23:46 UTC 2018
===============================================================
2018-05-30 18:23:46 | INFO | Generating log for 'date'...
tar: Removing leading `/' from member names
/etc/cron.d/
… rca continued…
如果您需要在其他节点上运行rca命令,您必须删除Cisco DNA Center中配置的情景,然后Cisco DNA Center会要求您选择新的集群间IP地址,您可以定义其他节点的IP地址。
[Wed May 30 18:24:10 UTC] maglev@10.1.1.2 (maglev-master-10) ~
$ sudo maglev context delete maglev-1
Removed command line context 'maglev-1'
[Wed May 30 18:24:18 UTC] maglev@10.1.1.2 (maglev-master-10) ~
$ more /home/maglev/.maglevconf
;---------------------------------------------------------------------
; Modified by Maglev: Wed, 30 May 2018 18:24:18 UTC
; maglev 73529
;---------------------------------------------------------------------
[global]
[Wed May 30 18:24:26 UTC] maglev@10.1.1.2 (maglev-master-10) ~
$ rca
===============================================================
Verifying ssh/sudo access
===============================================================
Done
===============================================================
Verifying administration access
===============================================================
Cluster: 10.1.1.2 <-- now it asks for the new cluster IP address
[administration] username for 'https://10.1.1.2:443': admin
[administration] password for 'admin': <type your admin password>
User 'admin' logged into '10.1.1.2' successfully
===============================================================
RCA package created on Wed May 30 18:24:44 UTC 2018
===============================================================
2018-05-30 18:24:44 | INFO | Generating log for 'date'...
tar: Removing leading `/' from member names
/etc/cron.d/
/etc/cron.d/run-remedyctl
在Windows计算机上解压缩RCA文件
步骤1:下载WinSCP或您最喜欢的SCP客户端。
第二步:使用CLI凭证登录到Cisco DNA Center,选择SCP作为文件协议,然后选择端口号222。

第三步:导航到/data/rca文件夹。

第四步:将RCA文件复制到本地计算机。

在Mac或Linux计算机上提取RCA文件
注意:在本示例中,Cisco DNA Center IP地址解析为mxc-dnac4.cisco.com。将此主机名替换为您的Cisco DNA Center设备的完全限定域名(FQDN)或IP地址。
步骤1:打开终端会话,然后按照以下步骤将存储在Cisco DNA Center设备/data/rca目录中的名为maglev-10.1.1.4-rca-2018-09-11_15-32-40_UTC.tar.gz的RCA文件复制到您计算机上的当前工作目录。
ALECARRA-M-P1Z8:~ alecarra$ scp -P 2222 maglev@mxc-dnac4.cisco.com:/data/rca/maglev-10.1.1.4-rca-2018-09-11_15-32-40_UTC.tar.gz ./
Welcome to the Maglev Appliance
maglev@mxc-dnac4.cisco.com's password: <type your maglev password>
maglev-10.1.1.4-rca-2018-09-11_15-32-40_UTC.tar.gz 100% 335MB 3.3MB/s 01:41
ALECARRA-M-P1Z8:~ alecarra$
将RCA文件推送到Mac或Linux计算机
在Cisco DNA Center设备的CLI中,使用以下语法:
$ scp /data/rca/<RCA file name> <Mac/Linux username>@<Mac/Linux IP address>:<path to save the file>
以下是实验中用到的命令示例:
$ scp /data/rca/maglev-10.1.1.4-rca-2018-09-11_15-32-40_UTC.tar.gz alecarra@10.24.133.238:/Users/alecarra/Documents/DNA
The authenticity of host '10.24.133.238 (10.24.133.238)' can't be established.
ECDSA key fingerprint is SHA256:u660kUomvMParNkcPIm7oXrDp84rilP5CM9wCWCFOAE.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.24.133.238' (ECDSA) to the list of known hosts.
Password:
maglev-10.1.1.4-rca-2018-09-11_15-32-40_UTC.tar.gz 100% 335MB 3.7MB/s 01:32
从您的计算机将RCA文件上传到现有的TAC服务请求
您可以使用案例文件上传工具通过浏览器将RCA文件上传到您的TAC服务请求。根据需要指定案例编号。
将RCA文件直接从您的Cisco DNA Center设备推送到TAC服务请求
有两个选项可以将文件(例如RCA)直接从Cisco DNA Center设备上传到TAC服务请求(SR)。在这两个选项中,用户名是SR编号,密码是每个SR唯一的令牌。用户名/密码始终显示在服务请求开始时的备注中,也可以从SCM中检索。有关令牌的详细信息,请参阅将客户文件上传到Cisco技术支持中心。
服务请求的输出示例:
Subject: 688046089: CXD Upload Credentials
You can now upload files to the case using FTP/FTPS/SCP/SFTP/HTTPS protocols and the following details:
Hostname: cxd.cisco.com
Username: 688046089
Password: gX***********P7
上传选项1。通过HTTPS上传文件(最快的选项并使用端口443)
步骤1:测试您是否已通过端口443从Cisco DNA Center设备连接到cxd.cisco.com。以下是执行测试的一种方法:
$ nc -zv cxd.cisco.com 443
Connection to cxd.cisco.com 443 port [tcp/https] succeeded!
$
注意:如果测试未成功,则无法使用此方法上传文件。
第二步:如果测试成功,请使用此命令通过HTTPS上传文件:
$ curl –T “
” -u
https://cxd.cisco.com/home/
(如果要查看更详细的上传视图,请添加-v选项。例如,“curl -vT ...”)
例如:
$ curl -T "./test.txt" -u 688046089 https://cxd.cisco.com/home/
Enter host password for user '688046089':
[Tue Dec 10 13:35:47 UTC] maglev@192.168.5.11 (maglev-master-1) ~
$
上传选项2。通过SCP上传文件(使用端口22)
步骤1:测试您是否具有从Cisco DNA Center设备通过端口22到cxd.cisco.com的连接。以下是执行测试的一种方法:
$ nc -zv cxd.cisco.com 22
Connection to cxd.cisco.com 22 port [tcp/ssh] succeeded!
$
注意:如果测试未成功,则无法使用此方法上传文件。
第二步:如果测试成功,请使用此命令通过SCP上传文件:
$ scp
@cxd.cisco.com:
例如:
$ scp ./test.txt 688046089@cxd.cisco.com:
The authenticity of host 'cxd.cisco.com (X.X.X.X)' can't be established.
RSA key fingerprint is SHA256:3c8Vi3Ms2AITZlNzkBccR1pvE5ie9oMs64Uh0uhRado.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'cxd.cisco.com,X.X.X.X' (RSA) to the list of known hosts.
688046089@cxd.cisco.com's password:
test.txt 100% 39 0.0KB/s 00:00
[Tue Dec 10 13:44:27 UTC] maglev@192.168.5.11 (maglev-master-1) ~
$