了解ISE 3.3节点注册流程

下载选项

  • PDF     (1.8 MB)
    在各种设备上使用 Adobe Reader 查看
  • ePub     (1.2 MB)
    在 iPhone、iPad、Android、Sony Reader 或 Windows Phone 上使用各种应用查看
  • Mobi (Kindle)     (1.3 MB)
    在 Kindle 设备上查看或在多个设备上使用 Kindle 应用查看
已更新: 2025 年 3 月 13 日
文档 ID:222828

非歧视性语言

此产品的文档集力求使用非歧视性语言。在本文档集中，非歧视性语言是指不隐含针对年龄、残障、性别、种族身份、族群身份、性取向、社会经济地位和交叉性的歧视的语言。由于产品软件的用户界面中使用的硬编码语言、基于 RFP 文档使用的语言或引用的第三方产品使用的语言，文档中可能无法确保完全使用非歧视性语言。 深入了解思科如何使用包容性语言。

关于此翻译

思科采用人工翻译与机器翻译相结合的方式将此文档翻译成不同语言，希望全球的用户都能通过各自的语言得到支持性的内容。 请注意：即使是最好的机器翻译，其准确度也不及专业翻译人员的水平。 Cisco Systems, Inc. 对于翻译的准确性不承担任何责任，并建议您总是参考英文原始文档（已提供链接）。

    简介

    本文档介绍身份服务引擎(ISE)节点注册前提条件、逐步流程、PCAP分析、日志分析。

    前提条件

    您必须具备思科身份服务引擎(ISE)的基本知识。

    背景信息

    • 独立节点：具有单个Cisco ISE节点的部署。此节点运行管理、策略服务和监控角色。
    • 分布式部署：具有多个Cisco ISE节点的部署。为了支持故障转移和提高性能，您可以设置一个部署以分布式方式部署多个思科ISE节点。在Cisco ISE分布式部署中，管理和监控活动是集中式的，并且处理在策略服务节点之间分布。根据您的性能需求，您可以扩展部署。
    • ISE节点可以处于某个状态的主节点、辅助节点或独立节点。

    • ISE节点可以承担以下任何角色：管理、策略服务和监控。

    • 您需要执行注册过程，将更多节点添加到主节点以形成集群。

    要求

    • 安装ISE节点后，您必须选择一个节点并将其状态从独立更改为主要。导航到Administration > Deployment，点击ISE节点> Make Primary。
    • 您可以在分布式部署中拥有一个主节点。

    • 要注册的辅助节点的FQDN必须从主节点解析。必须执行正向和反向DNS查找。

    • 两个节点的版本/修补程序详细信息是相同的。

    • 您必须具有辅助节点的超级管理员凭据。
    • 确保两个节点的管理员证书都是受信任的，如果第三方CA签名证书，请将根CA添加到受信任证书存储中。

    • 节点之间的延迟小于300毫秒。

    所需组件

    本文档中的信息基于以下软件和硬件版本

    • 思科身份服务引擎3.3
    • ISE VM

    本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始（默认）配置。如果您的网络处于活动状态，请确保您了解所有命令的潜在影响。

    所需端口

    • HTTPS(SOAP):TCP/443

    • 数据同步/复制(JGroups):TCP/12001 

    • ISE消息服务：SSL:TCP/8671

    • ISE内部通信：TCP/15672

    • 分析器终端所有权同步/复制：TCP/6379

    需要调试

    要设置为调试级别的属性：

    • 复制部署（replication.log和ise-psc.log）
    • Replication-JGroup（replication.log和ise-psc.log）
    • 复制跟踪器(tracking.log)
    • hibernate(hibernate.log)
    • JMS(replication.log)
    • ca-service(caservice.log)
    • admin-ca(ise-psc.log)

    节点详细信息

    • ise330.tac.local(10.127.197.174)是PAN节点
    • ise331.tac.local(10.127.197.175)是SAN节点

    拓扑

    nodes

    涉及的时间戳

    节点ise331.tac.local在ise330.tac.local上注册

    注册单击 — 2025-01-31, 16:00:01 

    下一次点击（填写辅助节点FQDN详细信息后）–2025-01-31,16:00:13 

    提交单击（选择角色后）–2025-01-31,16:00:21

    Replication-2025-01-31, 16:02:22

    已完成同步–2025-01-31 16:30:54

    注册流程

    节点注册：从主管理节点到辅助节点的经过身份验证的配置数据库复制过程

    步骤 1：将ISE节点作为主节点

    最初，每个节点都处于独立模式。要注册其他节点，请将其中一个节点设置为主节点。

    导航到Administration > Deployment > 点击ISE节点/编辑节点。

    单击Make Primary。

    Standalone

    单击Edit节点。
    Edit

    单击Make Primary并Save。

    Primary

    该角色现在成为主角色。

    Primary

    步骤 2：注册辅助节点

    要注册的节点必须处于独立模式。

    转到辅助节点并获取FQDN。

    导航到管理>部署。单击节点名称。

    Standalone

    转到PAN GUI。

    导航到管理>部署。

    单击Register。

    它要求注册节点的FQDN和凭证。

    Register

    输入辅助节点的FQDN和超级管理员用户凭证。

    FQDN

    单击Next时，它会导入辅助节点的证书。

    单击Import certificate（导入证书），然后继续。
    Import Certificate

    现在选择辅助节点上所需的角色，然后单击Submit。

    Submit

    Save

    然后，辅助节点注册到主节点。单击OK。

    Warning

    验证添加到PAN的辅助节点和琥珀色表示正在注册/同步。

    Sync

    步骤 4：当您选择辅助管理节点(SAN)时，需要续订许可证。它不适用于PSN。

    导航到管理>许可。
    点击续订注册。 

    License Renew

    步骤 5：注册成功。

    Final

    PCAP分析

    在PCAP中，您会看到DNS、443上的证书交换。

    Certificatiom

    DNS流量：当您点击注册并提供FQDN时，主节点会尝试解析辅助节点的FQDN。

    DNS

    您还可以看到两个节点之间的证书交换。

    客户端问候消息

    Client hello

    服务器Hello、证书、服务器密钥交换、服务器Hello

    我们可以看到ise331.tac.local将其证书共享给PAN节点。

    Server hello

    客户端密钥交换具有公钥。 Client Key Exchange

    两个节点都修复密码套件并创建加密隧道以共享详细信息。

    Change cipher spec

    CLI实用程序 

    • ise-psc.log - DNS查询/证书验证/证书复制/同步状态控制

    从根目录开始的路径：/opt/CSCOcpm/logs/ise-psc.log 

    在CLI中，

    #show logg application ise-psc.log tail

    • ADE.log — 数据库导入/导出，服务启动/停止

    根路径：/var/log/ade/ADE.log

    在CLI中，

    #show logg system ade/ADE.log tail

    • Replication.log — 在数据库导入或DMP文件传输后记录问题

    从根目录开始的路径：/opt/CSCOcpm/logs/replication.log

    在CLI中，

    #show application replication.log tail

    • Deployment.log — 与证书、响应页面相关的日志

    根路径：/opt/CSCOcpm/logs/deployment.log

    在CLI中，

    #show logging application deployment.log

    日志分析

    步骤 1：点击注册ISE节点

    ise330-ise-psc.log: 

    2025-01-31 16:00:01,992 INFO [admin-http-pool2][[]] cpm.admin.infra.spring.ISEAdminControllerUtils -::admin:: — 在action-forwards中找到的映射路径，转发到：/pages/modules/infra/deployment/deploymentRegister.jsp

    步骤 2：填写辅助节点的详细信息。

    ise330-deployment.log:

    2025-01-31 16:00:11,313 INFO [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331.tac.local:registerNode:-Calling register for host FQDNise331.tac.local

    2025-01-31 16:00:11,371 DEBUG [admin-http-pool5][[]] deployment.client.cert.validator.HttpsCertPathValidatorImpl -::admin:ise331.tac.local:registerNode:-证书路径是否有效？true

    ise331-deployment.log 
    2025-01-31 16:00:11,708 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doPost /register
    2025-01-31 16:00:11,710 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doGet/register
    2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 检索到的主主机名为ise330.tac.local

    步骤 3：DNS解析

    ise330- ise-psc.log: 

    2025-01-31 16:00:13,208 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331.tac.local:registerNode: — 正在注册的节点具有FQDN“ise331.tac.local”。此名称解析为IP地址10.127.175

    2025-01-31 16:00:20,638 INFO [admin-http-pool3][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:: — 正在添加的节点是辅助PAP :ise331

    ise331-ise-psc.log
    2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -:::: — 正在检查主机ise330.tac.local是否可解析。
    2025-01-31 16:00:11,721 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -::::-Host ise330.tac.local可在5毫秒内解析dns

    第4步：证书

    ise330-ise.psc.log

    2025-01-31 16:00:20,887 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode:-preparing to call getServCert

    ise330-deployment.log 
    2025-01-31 16:00:20,888 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- hostAlias ::ise331.tac.local ipAddrString :10.127.197.175 urlStr ::https://ise331.tac.local/admin/API/mnt/api/ServCert

    2025-01-31 16:00:21,419 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- GET:请求tohttps://ise331.tac.local/admin/API/mnt/api/ServCert已完成。

    步骤 5：添加已提交角色的辅助节点

    ise330-ise-psc.log
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 收到的NG事件：Add
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current :节点master状态：备用
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current :NodeRoleStatus:辅助
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 当前：HostConfig event hostAlias:ise331.tac.local

    已成功创建并保存节点详细信息

    ise330-deployment.log
    2025-01-31 16:01:22,247 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:- HostConfig 'ise331'已成功创建
    2025-01-31 16:01:22,251 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 检索的主机配置[hostName=ise331, dispayName=ise331, hostId=5ff70820-dfbe-11ef-bb78-12467b70bb3d， gateWay=1 0.127.197.1、masterStatus=STANDBY、nodeRoleStatus=SECONDARY、nodeTypes=PAP+MNT+PDP、nodeServiceType=SESSION、PROFILER、userName=null、smtpPort=null、smtpHost=null、hostAlias=ise331.tac.local、udiPid=ISE-VM-K9、udiVid=Vid=Sn =S7LEAGKMIHM， udiPT=VM， installType=null， vmInfo=16179780|12|LARGE||2025-01-30 21:44:33 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=5ff70823-dfbe-11ef-bb78-12467b70bb3d， user name=<not shown>, passWd=<not shown>, portNum=1521, sId=cpm10] MasterInterface [id=5ff70822-dfbe-11ef-bb78-12467b70bb3d， userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLENABLE=FALSE] NICIInterface [ID FF70821-DFBE-11EF-BB78-12467B70BB3D， IPAddress=10.127.197.175, SUBNetMasK=255.255.255.0, MACAddress=00-50-56-8B-23-2E， NICCarDS=ETH0]

    步骤 6：证书

    ise330-ise-psc.log
    2025-01-31 16:01:22,251 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode:- HostConfig hostId of registering node ise331 at time of local cert save:5ff70820-dfbe-11ef-bb78-12467b70bb3d。所有本地证书和CSR都使用此hostId引用HostConfig。

    ise330-deployment.log 
    2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-导入部署共享证书
    2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在准备连接

    2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 已连接到注册节点
    2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Sending import CertParams to registering node
    2025-01-31 16:01:23,822 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 导入发送到注册节点的证书参数
    2025-01-31 16:01:23,823 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 接收导入的证书id

    2025-01-31 16:01:24,147 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Imported certs ids received:
    2025-01-31 16:01:24,148 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Importing deployment shared certificates — 完成
    2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 内部getHostConfigForLocalNode获取localhostconfig
    2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:- hostName = ise330
    2025-01-31 16:01:24,385 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 检索的主机配置[主机名=ise330，显示名称=ise330，主机Id=50451540-dee0-11ef-90b1-0050568bb121,gateWay=10.7 .197.1, masterStatus=ACTIVE， nodeRoleStatus=PRIMARY， nodeTypes=PAP+MNT+PDP， nodeServiceType=SESSION，PROFILER， userName=null， smtpPort=null， smtpHost=null， hostAlias=ise330.tac.local， udiPid=ISE-VM-K9, udiVid=V01, udiSN=IRN9DCFIG9, udiPT =VM， installType=null， vmInfo=16179788|12|LARGE|300 GiB|2025-01-31 01:44:51 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=50451543-dee0-11ef-90b1-0050568bb121, userName=<未显示>, passWd <not shown>, portNum=1521, sId=cpm10] MasterInterface [id=50451542-dee0-11ef-90b1-0050568bb121, userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLEnable=true] NICIinterface [id=50451541-0-11ef-90b10050568 bb121, ipAddress=10.127.197.174, subNetMask=255.255.255.0, macAddress=00-50-56-8b-b1-21, nicCards=eth0]

    通配符检查

    ise-psc.log <==
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地证书通知。
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 本地证书是EAP证书。正在更新KeyAndCertStoreUtil
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.util.KeyAndCertStoreUtil -::admin:ise331:registerNode: — 已收到更新此节点的EAP证书链的通知。
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已发送更新请求。
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地证书通知。
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在检查证书类型
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 默认自签名服务器证书是通配符证书：假
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在检查SAML、APNS、CMCS或ProfileSigning证书
    2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 默认自签名服务器证书是SAML证书：假
    2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cisco.cpm.provisioning.cert.CertProvisioningFactory -::admin:ise331:registerNode:- CertChangeHandler.handle():在本地证书和信任证书的插入事件上构建EAP证书链

    ise330-ise-psc.log 
    2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 保存的LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241548535177602714336375,issuer=<null>,notBefore=Thu Jan 30 13:32:34 IST 2025,notAfter=Sat Jan 30 13:32:34 IST 2027,subject=CN=ise331.tac.local，issuedTo=ise3333 31.tac.local，certificateFilename=<null>,digestHash=<null>],id=f0463881-4c64-4ff5-96a2-4f0089f50459,name=ise331_tac_local#382a40d27abf53ac42387c77#PID$_ISE-VM-K9$_VID$_V01$_S7LEAGKMIHM name， friendly =默认自签名服务器证书、x509Certificate=null、iseRoles=[EAP、Admin、Portal、DTLS]、hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e、hostUDI=PID:ISE-VM-K9,VID:V01，序列号：S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-2, -92, -78, 73, -87, 65, 60, -71, 0, 7, -127, -104, -124, 56, -83], description=null]
    2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在准备保存LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241611749295087684098633,issuer=<null>,notBefore=Thu Jan 30 13:32:41 IST 2025,notAfter=Tue Jan 29 13:32:41 IST 2030,subject=CN=SAML_ise31.tac.local，issuedTo=SAML_ise31.tac local，issuedBy=SAML_ise331.tac.local，certificateFilename=<null>,digestHash=<null>],id=26fd28f0-6346-4fd5-8699-312dfdf97a8e，name=SAML_ise331_tac_local#382a40d5e804fc9a4ba71a49#PID$_ISE-VM-k9 $_VID$_V01$_SN$_S7LEAGKMIHM， friendlyName=默认自签名saml服务器证书 — CN=SAML_ise331.tac.local， x509Certificate=null， iseRoles=[NO_SSOCert], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01，序列号：S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-18, 47, -17, -88, 79, -30, 69, -12, -73, 120, -111, -36, 40, 27, 43, 68], description=null]主机名：ise331主机配置Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d

    ise330-replication.log 
    2025-01-31 16:01:34,051 DEBUG [admin-http-pool5][[]] cisco.cpm.deployment.replication.PublisherImpl -::admin:ise331:registerNode: — 添加到发布队列ID:8afb25b0-dfbe-11ef-bb78-12467b70bb3d，序列号：0，数据：3058 bytes

    ise330-replication.log 
    2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟踪注册并同步为主机输入addNodeToDistributionSetup:ise331.tac.local
    2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 输入addNodeToDistributionSetupUsingJgroups
    2025-01-31 16:02:14,501 INFO [admin-http-pool5][[]] api.services.persistance.dao.ReplicationStatusDAImpl -::admin:ise331:registerNode: — 主机名：ise331，数据库'SEC_REPLICATIONSTATUS' =进行中，节点角色：SECONDARY、ReplicationStatus对象状态：SYNC_INPROGRESS
    2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 正在退出addNodeToDistributionSetupUsingJgroups
    2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪注册和同步完成addNodeToDistributionSetup for host:ise331.tac.local

    2025-01-31 16:02:14,508 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 输入offerSyncRequestToQueue
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::admin:ise331:registerNode: — 创建的FullSyncInfo[ a31cab00-dfbe-11ef-bb78-12467b70bb3d ]
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync同步请求是hostFQDN[ise331.tac.local] exportFilePath[null] syncRequestIdentifier[null] syncRequestTime[null] syncStatus[SYNC_INSYNC TranSIENTSyncStatus[NULL] SYNCRequestType[REGISTER]
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 退出offerSyncRequestToQueue

    步骤 7：在群集中注册节点

    ise330-ise-psc.log 
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.DistributionImpl -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 节点ise331的新注册码已完成
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 节点ise331已成功注册到角色管理、监控、策略服务

    步骤 8::防火墙规则

    ise330-ise-psc.log

    2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.174]

    2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允许对ips进行DB访问：[10.127.197.175]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 应用jGroup的防火墙规则

    2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 适用于jGroup的已应用防火墙规则。

    2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

    2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 为jGroup应用防火墙规则

    2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 已应用jGroup的防火墙规则。

    2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 为节点组应用防火墙规则。

    2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已应用节点组的防火墙规则。

    2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

    2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

    2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 为jGroup应用防火墙规则

    2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 适用于jGroup的防火墙规则。

    2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 正在对节点组应用防火墙规则。

    2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 节点组的已应用防火墙规则。

    ise331-ise-psc.lohg

    2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.174]

    2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允许ips访问数据库：[10.127.197.175]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 应用jGroup的防火墙规则

    2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 适用于jGroup的已应用防火墙规则。

    2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

    2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 为jGroup应用防火墙规则

    2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 已应用jGroup的防火墙规则。

    2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 为节点组应用防火墙规则。

    2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已应用节点组的防火墙规则。

    2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

    2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

    2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

    2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 为jGroup应用防火墙规则

    2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 适用于jGroup的防火墙规则。

    2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 正在对节点组应用防火墙规则。

    2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 节点组的已应用防火墙规则。

    步骤 9：Datadump导出，直到当前系统更改编号(SCN)并将文件传输到ise331

    ise330-ade.log

    2025-01-31T16:02:41.682824+05:30 ise330根：info:[sync_export.sh]正在启动同步标识符b33db240-dfbe-11ef-bb78-12467b70bb3d的datadump导出……

    2025-01-31T16:02:43.545110+05:30 ise330根：info:[sync_export.sh] SCN retrieved for sync identifier b33db240-dfbe-11ef-bb78-12467b70bb3d......现在开始导出CSCN 6022419和主机ise330025-01-31T16:09:35.095186+05:30 ise30根：info:[sync_export.sh]同步标识符b33db240-dfbe-11ef-bb78-12467b70bb3d的导出成功……

    ise330-replication.log

    2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Processing Sync Requests
    2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]]类com.cisco.epm.fullsync.FullSyncInfoHelper -::FullSync:- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，null
    2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Found 1个同步请求。
    2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef 78-12467b70bb3d，b33db240-dfbe-11ef-bb78-1246712467 b70bb3d2025-01-31 16:02:41,584 INFO [Deployment-Sync-Manager-Thread-0][] [] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-bb78 b70bb3d:FullSync:-Tracking RegistrationAndSync — 为标识符启动的导出脚本[b33db240-dfbe-11ef-bb78-12467b70bb3d]
    2025-01-31 16:02:41,586 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:

    2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟踪注册和同步 — 导出脚本已完成标识符[b33db240-be 1ef-bb78-12467b70bb3d] returnVal + 0
    2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-DB Export Completed:returnValue :0
    2025-01-31 16:09:40,603 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 导出数据库转储:/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp大小（字节）：131614567
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Tracking RegistrationAndSync — 创建文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Tracking RegistrationAndSync -Created file /opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties
    2025-01-31 16:09:40,606信息[Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的属性文件
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在创建文件/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks
    2025-01-31 16:09:40,688信息[Deployment-Sync-Manager-Thread-0][[]]类com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的文件/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks
    2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的证书
    2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb78 12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d
    2025-01-31 16:09:40,696 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 同步请求主机FQDN[ise331.tac.local] exportFilePath[/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp] sync请求标识符[b33db240-dfbe-11ef-bb78-12467b70bb3d] syncRequestTime[Fri Jan 31 16:14:40 IST 2025] syncStatus[SYNC_INPROGRESS] transientSyncStatus[DBEXPORT_SUCCEEDED] syncRequestType[REGISTER]
    2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 使用密钥：ise331b33db240-dfbe-11bb将未来对象添加到Map 78-12467b70bb3d，syncThreadsFutureMap:{ise331b33db240-dfbe-11ef-bb78-12467b70bb3d=java.util.concurrent.FutureTask@25d5b491}
    2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 执行器线程池设置的超时为：300（分钟）
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]类com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 已开始对主机：ise331执行SyncRequest-Thread-0，同步标识符：b33db240-dfbe-11ef-bb78-12467b70bb3d
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 覆盖从2025年1月31日16:14:40至2025年1月31日16:09:40起的同步开始时间

    传输同步文件

    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -:::::-Transferrating sync files..
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp]，字节大小：[131614567]
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks]，字节大小：[25683]
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties]，大小（字节）：[263]
    2025-01-31 16:09:40,706 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ repo_random.key]，大小（字节）：[24]
    2025-01-31 16:09:41,920 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 创建http连接管理器
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 在http客户端上设置凭据
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟踪RegistrationAndSync — 开始将文件传输到辅助节点ise331.tac.local
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟踪RegistrationAndSync -辅助url ishttps://ise331.tac.local/deployment-rpc/uploadSyncFiles

    2025-01-31 16:09:52,567 WARN [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 成功将文件传输到辅助节点ise331.tac.local
    2025-01-31 16:09:52,568 WARN [Deployment-SyncRequest-Thread-0][[]]类com.cisco.epm.fullsync.HttpClientHelper -:::: — 上传完成，响应=
    2025-01-31 16:09:52,568 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d
    2025-01-31 16:09:52,570 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -::::-Sync files transferred。现在正在辅助节点上启动同步进程……

    步骤 10：从ise330接收文件

    ise331-replication.log

    2025-01-31 16:09:45,814信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 正在启动receiveSyncFiles PAP:

    2025-01-31 16:09:45,819信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync - Inside downloadSyncFilesAndVerify :请求org.apache.catalina.connector.RequestFacade@524def8e响应：org.apache.catalina.connector.ResponseFacade@51b18399

    2025-01-31 16:09:45,821信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 同步的最大上传文件计数设置为：6

    2025-01-31 16:09:48,164信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 下载的项目数：6

    2025-01-31 16:09:48,190信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,228警告[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269]

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp，文件名= null，内容类型= null，文件大小 = 131614567

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks，文件名= null，内容类型= null，文件大小 = 25683

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties，文件名= null，内容类型= null，文件大小 = 263

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :repo_random.key

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= repo_random.key，文件名= null，内容类型= null，文件大小 = 24

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：repo_random.key

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：repo_random.key

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :checkSum

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :syncRequestId

    2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 即将验证AndPrepareForSync

    2025-01-31 16:09:49,243信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::-文件已下载)cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmpconfig_b33db240-dfbe-11ef-bb78-12467b70bb3d.propertiesprimaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:50,294信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -:::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269] primaryCheckSum [9d2a72222b701adc69f8f70a88e 83eca3bbeead3fe025fbac94e9d77fc8fb269]

    2025-01-31 16:09:52,544信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 已完成receiveSyncFilesTracking RegistrationAndSync -

    2025-01-31 16:09:52,901信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 即将启动Sync

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 从PAP收到syncRequestIdentifier:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 从PAP收到辅助主机名：ise331.tac.local

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已从PAP接收primUserDbPwd

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 从PAP接收的dataDirectDbPwd

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Received nodeExporterPwd from PAP

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已从PAP接收piProfilerMetricPwd

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已从PAP接收primKekKey

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received papAdminPwd from PAP

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received syncRequestType from PAP:注册

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-即将调用startImportSyncPollerScript

    2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -:::: — 调用同步轮询器以等待同步完成ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d [PrimaryDBPSWD] REGISTER

    2025-01-31 16:09:53,082信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::: — 正在返回同步轮询器以等待同步完成

    2025-01-31 16:09:53,083信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-调用了startImportSyncPollerScript

    2025-01-31 16:10:16,217调试[main][[]] cisco.cpm.cluster.impl.BaseServiceInvoker -::: — 正在注册NodeInfoService

    2025-01-31 16:11:29,181信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在发送临时同步状态：DBIMPORT_INITIATED，节点同步状态：SYNC_INPROGRESS到PAP。同步请求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在从读取主节点信息：/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier..local值：配置文件中的b33db240-dfbe-11ef-bb78-12467b70bb3d & syncRequestIdentifier :b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 对于syncRequestIdentifier b33db240-dfbe-11ef-bb78-12467b70bb3d，正在将同步状态发送到[https://ise330.tac.local/deployment-rpc/updateSyncStatus]

    2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建http连接管理器

    2025-01-31 16:11:29,212调试[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier —> b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:12:27,369信息[main][[]] class com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 在http客户端上设置凭据

    2025-01-31 16:12:27,744信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已成功更新同步状态的主要

    步骤 11：在ise331上导入DB

    ise331-replication.log

    2025-01-31 16:12:27,746信息[main][[]]类com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在启动数据库导入……

    2025-01-31 16:12:27,746信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要运行的脚本[ /usr/bin/sudo /opt/CSCOcpm/bin/sync_import.sh ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d REGISTER ]

    2025-01-31 16:16:20,351信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d::-DB导入已完成。

    2025-01-31 16:16:20,351信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要运行的脚本[ /usr/bin/sudo /opt/CSCOcpm/bin/setdbpw.sh primaryUserDbPWD ]

    2025-01-31 16:18:32,753信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 数据库密码已重置。

    2025-01-31 16:18:32,754信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在发送临时同步状态：SECONDARY_SYNC_COMPLETED，节点同步状态：SYNC_COMPLETED到PAP

    ise331-ade.log

    2025-01-31T16:12:30.546657+05:30 ise331根：info:[sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：正在启动datadump导入……

    2025-01-31T16:16:19.734878+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：数据库同步导入已成功完成

    导入完成后删除数据库

    2025-01-31T16:16:19.895863+05:30 ise331根：info:[application:operation:sync_import.sh]同步完成后从数据库删除调配资源……

    2025-01-31T16:16:20.341542+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Released the DATABASE_SYNCIMPORT Lock

    2025-01-31T16:16:20.345768+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Datadump导入过程已完成

    2025-01-31T16:16:20.738342+05:30 ise331根：info:[application:operation:setdbpw.sh]重置内部数据库用户密码以匹配ISE主要用户的密码

    步骤 12：正在将同步完成状态更新为ise330

    ise331-replication.log

    2025-01-31 16:18:32,754信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在发送临时同步状态：SECONDARY_SYNC_COMPLETED，节点同步状态：SYNC_COMPLETED到PAP。同步请求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:29:59,419信息[Psc-SyncStatusUpdaterJob-Thread][[]] Replication-Deployment.PrimaryNodeProxy -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 在完全同步到主objId后发送ise331的sync statusSYNC_COMPLETED:a31cab00-dfbe-11ef-bb78-12467b70bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostConfigMdDate:2025-01-31 16:16:19.880098

    ise330-replication.log

    2025-01-31 16:29:59,429信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Received status:SYNC COMPLETED,objid:a31cab00-dfbe-11ef-bb78-12467b7 0bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostconfigModDt:2025-01-31 16:16:19.880098 from ise331

    2025-01-31 16:29:59,480信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 此更新适用于数据库中找到的最新完全同步信息。

    2025-01-31 16:29:59,480信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 将ise331的状态从进行中更新为同步已完成

    与节点同步问题相关的警报

    • 缓慢复制信息
    • 复制速度缓慢警告
    • 缓慢复制错误
    • 复制失败
    • 复制已停止
    • 节点不同步

    已知缺陷

    Bug ID

    描述

    CSCwj67089

    通过本地磁盘管理将大文件导入到辅助节点时，思科ISE应用服务器崩溃。

    CSCwi78722

    Azure VM:无法将节点注册到部署。

    CSCwh70275

    注册节点时，注销剩余的证书时，当前使用的证书将被删除。

    CSCwh08408

    由于找不到节点导出器密码，思科ISE版本3.3无法在升级后注册新节点到部署。

    修订历史记录

    版本 发布日期 备注
    1.0
    13-Mar-2025
    初始版本
    TAC Authored

    由思科工程师提供

    • 卡纳拉普迪·文卡塔·拉克希米·巴尔加维
      技术咨询工程师

    此文档是否有帮助?

    Feedback反馈

    联系我们

    本文档适用于以下产品