目录

简介

前提条件

背景信息

要求

所需组件

所需端口

需要调试

节点详细信息

拓扑

涉及的时间戳

注册流程

PCAP分析

CLI实用程序

日志分析

与节点同步问题相关的警报

已知缺陷

简介

本文档介绍身份服务引擎(ISE)节点注册前提条件、逐步流程、PCAP分析、日志分析。

前提条件

您必须具备思科身份服务引擎(ISE)的基本知识。

背景信息

- 独立节点：具有单个Cisco ISE节点的部署。此节点运行管理、策略服务和监控角色。

- 分布式部署：具有多个Cisco ISE节点的部署。为了支持故障转移和提高性能，您可以设置一个部署以分布式方式部署多个思科ISE节点。在Cisco ISE分布式部署中，管理和监控活动是集中式的，并且处理在策略服务节点之间分布。根据您的性能需求，您可以扩展部署。

- ISE节点可以处于某个状态的主节点、辅助节点或独立节点。

- ISE节点可以承担以下任何角色：管理、策略服务和监控。

- 您需要执行注册过程，将更多节点添加到主节点以形成集群。

要求

- 安装ISE节点后，您必须选择一个节点并将其状态从独立更改为主要。导航到Administration > Deployment，点击ISE节点> Make Primary。

- 您可以在分布式部署中拥有一个主节点。

- 要注册的辅助节点的FQDN必须从主节点解析。必须执行正向和反向DNS查找。

- 两个节点的版本/修补程序详细信息是相同的。

- 您必须具有辅助节点的超级管理员凭据。

- 确保两个节点的管理员证书都是受信任的，如果第三方CA签名证书，请将根CA添加到受信任证书存储中。

- 节点之间的延迟小于300毫秒。

所需组件

本文档中的信息基于以下软件和硬件版本

- 思科身份服务引擎3.3

- ISE VM

本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始（默认）配置。如果您的网络处于活动状态，请确保您了解所有命令的潜在影响。

所需端口

- HTTPS(SOAP):TCP/443

- 数据同步/复制(JGroups):TCP/12001

- ISE消息服务：SSL:TCP/8671

- ISE内部通信：TCP/15672

- 分析器终端所有权同步/复制：TCP/6379

需要调试

要设置为调试级别的属性：

- 复制部署（replication.log和ise-psc.log）

- Replication-JGroup（replication.log和ise-psc.log）

- 复制跟踪器(tracking.log)

- hibernate(hibernate.log)

- JMS(replication.log)

- ca-service(caservice.log)

- admin-ca(ise-psc.log)

节点详细信息

- ise330.tac.local(10.127.197.174)是PAN节点

- ise331.tac.local(10.127.197.175)是SAN节点

拓扑

涉及的时间戳

节点ise331.tac.local在ise330.tac.local上注册

注册单击 — 2025-01-31, 16:00:01

下一次点击（填写辅助节点FQDN详细信息后）–2025-01-31,16:00:13

提交单击（选择角色后）–2025-01-31,16:00:21

Replication-2025-01-31, 16:02:22

已完成同步–2025-01-31 16:30:54

注册流程

节点注册：从主管理节点到辅助节点的经过身份验证的配置数据库复制过程

步骤 1：将ISE节点作为主节点

最初，每个节点都处于独立模式。要注册其他节点，请将其中一个节点设置为主节点。

导航到Administration > Deployment > 点击ISE节点/编辑节点。

单击Make Primary。

单击Edit节点。

单击Make Primary并Save。

该角色现在成为主角色。

步骤 2：注册辅助节点

要注册的节点必须处于独立模式。

转到辅助节点并获取FQDN。

导航到管理>部署。单击节点名称。

转到PAN GUI。

导航到管理>部署。

单击Register。

它要求注册节点的FQDN和凭证。

输入辅助节点的FQDN和超级管理员用户凭证。

单击Next时，它会导入辅助节点的证书。

单击Import certificate（导入证书），然后继续。

现在选择辅助节点上所需的角色，然后单击Submit。

然后，辅助节点注册到主节点。单击OK。

验证添加到PAN的辅助节点和琥珀色表示正在注册/同步。

步骤 4：当您选择辅助管理节点(SAN)时，需要续订许可证。它不适用于PSN。

导航到管理>许可。

点击续订注册。

步骤 5：注册成功。

PCAP分析

在PCAP中，您会看到DNS、443上的证书交换。

DNS流量：当您点击注册并提供FQDN时，主节点会尝试解析辅助节点的FQDN。

您还可以看到两个节点之间的证书交换。

客户端问候消息

服务器Hello、证书、服务器密钥交换、服务器Hello

我们可以看到ise331.tac.local将其证书共享给PAN节点。

客户端密钥交换具有公钥。

两个节点都修复密码套件并创建加密隧道以共享详细信息。

CLI实用程序

- ise-psc.log - DNS查询/证书验证/证书复制/同步状态控制

从根目录开始的路径：/opt/CSCOcpm/logs/ise-psc.log

在CLI中，

#show logg application ise-psc.log tail

- ADE.log — 数据库导入/导出，服务启动/停止

根路径：/var/log/ade/ADE.log

在CLI中，

#show logg system ade/ADE.log tail

- Replication.log — 在数据库导入或DMP文件传输后记录问题

从根目录开始的路径：/opt/CSCOcpm/logs/replication.log

在CLI中，

#show application replication.log tail

- Deployment.log — 与证书、响应页面相关的日志

根路径：/opt/CSCOcpm/logs/deployment.log

在CLI中，

#show logging application deployment.log

日志分析

步骤 1：点击注册ISE节点

ise330-ise-psc.log:

2025-01-31 16:00:01,992 INFO [admin-http-pool2][[]] cpm.admin.infra.spring.ISEAdminControllerUtils -::admin:: — 在action-forwards中找到的映射路径，转发到：/pages/modules/infra/deployment/deploymentRegister.jsp

步骤 2：填写辅助节点的详细信息。

ise330-deployment.log:

2025-01-31 16:00:11,313 INFO [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331.tac.local:registerNode:-Calling register for host FQDNise331.tac.local

2025-01-31 16:00:11,371 DEBUG [admin-http-pool5][[]] deployment.client.cert.validator.HttpsCertPathValidatorImpl -::admin:ise331.tac.local:registerNode:-证书路径是否有效？true

ise331-deployment.log

2025-01-31 16:00:11,708 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doPost /register

2025-01-31 16:00:11,710 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doGet/register

2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 检索到的主主机名为ise330.tac.local

步骤 3：DNS解析

ise330- ise-psc.log:

2025-01-31 16:00:13,208 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331.tac.local:registerNode: — 正在注册的节点具有FQDN“ise331.tac.local”。此名称解析为IP地址10.127.175

2025-01-31 16:00:20,638 INFO [admin-http-pool3][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:: — 正在添加的节点是辅助PAP :ise331

ise331-ise-psc.log

2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -:::: — 正在检查主机ise330.tac.local是否可解析。

2025-01-31 16:00:11,721 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -::::-Host ise330.tac.local可在5毫秒内解析dns

第4步：证书

ise330-ise.psc.log

2025-01-31 16:00:20,887 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode:-preparing to call getServCert

ise330-deployment.log

2025-01-31 16:00:20,888 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- hostAlias ::ise331.tac.local ipAddrString :10.127.197.175 urlStr ::https://ise331.tac.local/admin/API/mnt/api/ServCert

2025-01-31 16:00:21,419 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- GET:请求tohttps://ise331.tac.local/admin/API/mnt/api/ServCert已完成。

步骤 5：添加已提交角色的辅助节点

ise330-ise-psc.log

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 收到的NG事件：Add

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current :节点master状态：备用

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current :NodeRoleStatus:辅助

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 当前：HostConfig event hostAlias:ise331.tac.local

已成功创建并保存节点详细信息

ise330-deployment.log

2025-01-31 16:01:22,247 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:- HostConfig 'ise331'已成功创建

2025-01-31 16:01:22,251 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 检索的主机配置[hostName=ise331, dispayName=ise331, hostId=5ff70820-dfbe-11ef-bb78-12467b70bb3d， gateWay=1 0.127.197.1、masterStatus=STANDBY、nodeRoleStatus=SECONDARY、nodeTypes=PAP+MNT+PDP、nodeServiceType=SESSION、PROFILER、userName=null、smtpPort=null、smtpHost=null、hostAlias=ise331.tac.local、udiPid=ISE-VM-K9、udiVid=Vid=Sn =S7LEAGKMIHM， udiPT=VM， installType=null， vmInfo=16179780|12|LARGE||2025-01-30 21:44:33 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=5ff70823-dfbe-11ef-bb78-12467b70bb3d， user name=<not shown>, passWd=<not shown>, portNum=1521, sId=cpm10] MasterInterface [id=5ff70822-dfbe-11ef-bb78-12467b70bb3d， userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLENABLE=FALSE] NICIInterface [ID FF70821-DFBE-11EF-BB78-12467B70BB3D， IPAddress=10.127.197.175, SUBNetMasK=255.255.255.0, MACAddress=00-50-56-8B-23-2E， NICCarDS=ETH0]

步骤 6：证书

ise330-ise-psc.log

2025-01-31 16:01:22,251 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode:- HostConfig hostId of registering node ise331 at time of local cert save:5ff70820-dfbe-11ef-bb78-12467b70bb3d。所有本地证书和CSR都使用此hostId引用HostConfig。

ise330-deployment.log

2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-导入部署共享证书

2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在准备连接

2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 已连接到注册节点

2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Sending import CertParams to registering node

2025-01-31 16:01:23,822 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 导入发送到注册节点的证书参数

2025-01-31 16:01:23,823 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 接收导入的证书id

2025-01-31 16:01:24,147 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Imported certs ids received:

2025-01-31 16:01:24,148 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Importing deployment shared certificates — 完成

2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 内部getHostConfigForLocalNode获取localhostconfig

2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:- hostName = ise330

2025-01-31 16:01:24,385 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 检索的主机配置[主机名=ise330，显示名称=ise330，主机Id=50451540-dee0-11ef-90b1-0050568bb121,gateWay=10.7 .197.1, masterStatus=ACTIVE， nodeRoleStatus=PRIMARY， nodeTypes=PAP+MNT+PDP， nodeServiceType=SESSION，PROFILER， userName=null， smtpPort=null， smtpHost=null， hostAlias=ise330.tac.local， udiPid=ISE-VM-K9, udiVid=V01, udiSN=IRN9DCFIG9, udiPT =VM， installType=null， vmInfo=16179788|12|LARGE|300 GiB|2025-01-31 01:44:51 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=50451543-dee0-11ef-90b1-0050568bb121, userName=<未显示>, passWd <not shown>, portNum=1521, sId=cpm10] MasterInterface [id=50451542-dee0-11ef-90b1-0050568bb121, userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLEnable=true] NICIinterface [id=50451541-0-11ef-90b10050568 bb121, ipAddress=10.127.197.174, subNetMask=255.255.255.0, macAddress=00-50-56-8b-b1-21, nicCards=eth0]

通配符检查

ise-psc.log <==

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地证书通知。

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 本地证书是EAP证书。正在更新KeyAndCertStoreUtil

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.util.KeyAndCertStoreUtil -::admin:ise331:registerNode: — 已收到更新此节点的EAP证书链的通知。

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已发送更新请求。

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地证书通知。

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在检查证书类型

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 默认自签名服务器证书是通配符证书：假

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在检查SAML、APNS、CMCS或ProfileSigning证书

2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 默认自签名服务器证书是SAML证书：假

2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cisco.cpm.provisioning.cert.CertProvisioningFactory -::admin:ise331:registerNode:- CertChangeHandler.handle():在本地证书和信任证书的插入事件上构建EAP证书链

ise330-ise-psc.log

2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 保存的LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241548535177602714336375,issuer=<null>,notBefore=Thu Jan 30 13:32:34 IST 2025,notAfter=Sat Jan 30 13:32:34 IST 2027,subject=CN=ise331.tac.local，issuedTo=ise3333 31.tac.local，certificateFilename=<null>,digestHash=<null>],id=f0463881-4c64-4ff5-96a2-4f0089f50459,name=ise331_tac_local#382a40d27abf53ac42387c77#PID$_ISE-VM-K9$_VID$_V01$_S7LEAGKMIHM name， friendly =默认自签名服务器证书、x509Certificate=null、iseRoles=[EAP、Admin、Portal、DTLS]、hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e、hostUDI=PID:ISE-VM-K9,VID:V01，序列号：S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-2, -92, -78, 73, -87, 65, 60, -71, 0, 7, -127, -104, -124, 56, -83], description=null]

2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在准备保存LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241611749295087684098633,issuer=<null>,notBefore=Thu Jan 30 13:32:41 IST 2025,notAfter=Tue Jan 29 13:32:41 IST 2030,subject=CN=SAML_ise31.tac.local，issuedTo=SAML_ise31.tac local，issuedBy=SAML_ise331.tac.local，certificateFilename=<null>,digestHash=<null>],id=26fd28f0-6346-4fd5-8699-312dfdf97a8e，name=SAML_ise331_tac_local#382a40d5e804fc9a4ba71a49#PID$_ISE-VM-k9 $_VID$_V01$_SN$_S7LEAGKMIHM， friendlyName=默认自签名saml服务器证书 — CN=SAML_ise331.tac.local， x509Certificate=null， iseRoles=[NO_SSOCert], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01，序列号：S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-18, 47, -17, -88, 79, -30, 69, -12, -73, 120, -111, -36, 40, 27, 43, 68], description=null]主机名：ise331主机配置Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d

ise330-replication.log

2025-01-31 16:01:34,051 DEBUG [admin-http-pool5][[]] cisco.cpm.deployment.replication.PublisherImpl -::admin:ise331:registerNode: — 添加到发布队列ID:8afb25b0-dfbe-11ef-bb78-12467b70bb3d，序列号：0，数据：3058 bytes

ise330-replication.log

2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟踪注册并同步为主机输入addNodeToDistributionSetup:ise331.tac.local

2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 输入addNodeToDistributionSetupUsingJgroups

2025-01-31 16:02:14,501 INFO [admin-http-pool5][[]] api.services.persistance.dao.ReplicationStatusDAImpl -::admin:ise331:registerNode: — 主机名：ise331，数据库'SEC_REPLICATIONSTATUS' =进行中，节点角色：SECONDARY、ReplicationStatus对象状态：SYNC_INPROGRESS

2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 正在退出addNodeToDistributionSetupUsingJgroups

2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪注册和同步完成addNodeToDistributionSetup for host:ise331.tac.local

2025-01-31 16:02:14,508 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 输入offerSyncRequestToQueue

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::admin:ise331:registerNode: — 创建的FullSyncInfo[ a31cab00-dfbe-11ef-bb78-12467b70bb3d ]

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync同步请求是hostFQDN[ise331.tac.local] exportFilePath[null] syncRequestIdentifier[null] syncRequestTime[null] syncStatus[SYNC_INSYNC TranSIENTSyncStatus[NULL] SYNCRequestType[REGISTER]

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 退出offerSyncRequestToQueue

步骤 7：在群集中注册节点

ise330-ise-psc.log

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.DistributionImpl -::admin:ise331:registerNode: — 跟踪RegistrationAndSync — 节点ise331的新注册码已完成

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 节点ise331已成功注册到角色管理、监控、策略服务

步骤 8::防火墙规则

ise330-ise-psc.log

2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.174]

2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允许对ips进行DB访问：[10.127.197.175]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 应用jGroup的防火墙规则

2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 适用于jGroup的已应用防火墙规则。

2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 为jGroup应用防火墙规则

2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 已应用jGroup的防火墙规则。

2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 为节点组应用防火墙规则。

2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已应用节点组的防火墙规则。

2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 为jGroup应用防火墙规则

2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 适用于jGroup的防火墙规则。

2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 正在对节点组应用防火墙规则。

2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 节点组的已应用防火墙规则。

ise331-ise-psc.lohg

2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.174]

2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允许ips访问数据库：[10.127.197.175]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 应用jGroup的防火墙规则

2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 适用于jGroup的已应用防火墙规则。

2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 为jGroup应用防火墙规则

2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 已应用jGroup的防火墙规则。

2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 为节点组应用防火墙规则。

2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已应用节点组的防火墙规则。

2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::: — 部署主机IP:[10.127.197.174, 10.127.197.175]iptable主机：[10.127.197.175、10.127.197.174]

2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允许对ips进行DB访问：[]

2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允许对ips进行DB访问：[]

2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 为jGroup应用防火墙规则

2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::: — 适用于jGroup的防火墙规则。

2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 正在对节点组应用防火墙规则。

2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-::: — 节点组的已应用防火墙规则。

步骤 9：Datadump导出，直到当前系统更改编号(SCN)并将文件传输到ise331

ise330-ade.log

2025-01-31T16:02:41.682824+05:30 ise330根：info:[sync_export.sh]正在启动同步标识符b33db240-dfbe-11ef-bb78-12467b70bb3d的datadump导出……

2025-01-31T16:02:43.545110+05:30 ise330根：info:[sync_export.sh] SCN retrieved for sync identifier b33db240-dfbe-11ef-bb78-12467b70bb3d......现在开始导出CSCN 6022419和主机ise330025-01-31T16:09:35.095186+05:30 ise30根：info:[sync_export.sh]同步标识符b33db240-dfbe-11ef-bb78-12467b70bb3d的导出成功……

ise330-replication.log

2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Processing Sync Requests

2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]]类com.cisco.epm.fullsync.FullSyncInfoHelper -::FullSync:- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，null

2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Found 1个同步请求。

2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef 78-12467b70bb3d，b33db240-dfbe-11ef-bb78-1246712467 b70bb3d2025-01-31 16:02:41,584 INFO [Deployment-Sync-Manager-Thread-0][] [] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-bb78 b70bb3d:FullSync:-Tracking RegistrationAndSync — 为标识符启动的导出脚本[b33db240-dfbe-11ef-bb78-12467b70bb3d]

2025-01-31 16:02:41,586 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:

2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟踪注册和同步 — 导出脚本已完成标识符[b33db240-be 1ef-bb78-12467b70bb3d] returnVal + 0

2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-DB Export Completed:returnValue :0

2025-01-31 16:09:40,603 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 导出数据库转储:/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp大小（字节）：131614567

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Tracking RegistrationAndSync — 创建文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Tracking RegistrationAndSync -Created file /opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:40,606信息[Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的属性文件

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在创建文件/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:40,688信息[Deployment-Sync-Manager-Thread-0][[]]类com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的文件/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建的证书

2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb78 12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:40,696 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 同步请求主机FQDN[ise331.tac.local] exportFilePath[/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp] sync请求标识符[b33db240-dfbe-11ef-bb78-12467b70bb3d] syncRequestTime[Fri Jan 31 16:14:40 IST 2025] syncStatus[SYNC_INPROGRESS] transientSyncStatus[DBEXPORT_SUCCEEDED] syncRequestType[REGISTER]

2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 使用密钥：ise331b33db240-dfbe-11bb将未来对象添加到Map 78-12467b70bb3d，syncThreadsFutureMap:{ise331b33db240-dfbe-11ef-bb78-12467b70bb3d=java.util.concurrent.FutureTask@25d5b491}

2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 执行器线程池设置的超时为：300（分钟）

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]类com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 已开始对主机：ise331执行SyncRequest-Thread-0，同步标识符：b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 覆盖从2025年1月31日16:14:40至2025年1月31日16:09:40起的同步开始时间

传输同步文件

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -:::::-Transferrating sync files..

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp]，字节大小：[131614567]

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks]，字节大小：[25683]

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties]，大小（字节）：[263]

2025-01-31 16:09:40,706 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 文件名：[ repo_random.key]，大小（字节）：[24]

2025-01-31 16:09:41,920 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 创建http连接管理器

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 在http客户端上设置凭据

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟踪RegistrationAndSync — 开始将文件传输到辅助节点ise331.tac.local

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟踪RegistrationAndSync -辅助url ishttps://ise331.tac.local/deployment-rpc/uploadSyncFiles

2025-01-31 16:09:52,567 WARN [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.HttpClientHelper -:::: — 成功将文件传输到辅助节点ise331.tac.local

2025-01-31 16:09:52,568 WARN [Deployment-SyncRequest-Thread-0][[]]类com.cisco.epm.fullsync.HttpClientHelper -:::: — 上传完成，响应=

2025-01-31 16:09:52,568 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d

2025-01-31 16:09:52,570 INFO [Deployment-SyncRequest-Thread-0][[]] class com.cisco.epm.fullsync.AbstractSyncRequest -::::-Sync files transferred。现在正在辅助节点上启动同步进程……

步骤 10：从ise330接收文件

ise331-replication.log

2025-01-31 16:09:45,814信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 正在启动receiveSyncFiles PAP:

2025-01-31 16:09:45,819信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync - Inside downloadSyncFilesAndVerify :请求org.apache.catalina.connector.RequestFacade@524def8e响应：org.apache.catalina.connector.ResponseFacade@51b18399

2025-01-31 16:09:45,821信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 同步的最大上传文件计数设置为：6

2025-01-31 16:09:48,164信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 下载的项目数：6

2025-01-31 16:09:48,190信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,228警告[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269]

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp，文件名= null，内容类型= null，文件大小 = 131614567

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks，文件名= null，内容类型= null，文件大小 = 25683

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties，文件名= null，内容类型= null，文件大小 = 263

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :repo_random.key

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 字段名称= repo_random.key，文件名= null，内容类型= null，文件大小 = 24

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在保存文件：repo_random.key

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 保存的文件：repo_random.key

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :checkSum

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- FileItem name :syncRequestId

2025-01-31 16:09:49,229信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 即将验证AndPrepareForSync

2025-01-31 16:09:49,243信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::-文件已下载)cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmpconfig_b33db240-dfbe-11ef-bb78-12467b70bb3d.propertiesprimaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:50,294信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -:::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269] primaryCheckSum [9d2a72222b701adc69f8f70a88e 83eca3bbeead3fe025fbac94e9d77fc8fb269]

2025-01-31 16:09:52,544信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 已完成receiveSyncFilesTracking RegistrationAndSync -

2025-01-31 16:09:52,901信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 即将启动Sync

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 从PAP收到syncRequestIdentifier:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 从PAP收到辅助主机名：ise331.tac.local

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已从PAP接收primUserDbPwd

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 从PAP接收的dataDirectDbPwd

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Received nodeExporterPwd from PAP

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已从PAP接收piProfilerMetricPwd

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已从PAP接收primKekKey

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received papAdminPwd from PAP

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received syncRequestType from PAP:注册

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-即将调用startImportSyncPollerScript

2025-01-31 16:09:52,902信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -:::: — 调用同步轮询器以等待同步完成ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d [PrimaryDBPSWD] REGISTER

2025-01-31 16:09:53,082信息[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::: — 正在返回同步轮询器以等待同步完成

2025-01-31 16:09:53,083信息[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-调用了startImportSyncPollerScript

2025-01-31 16:10:16,217调试[main][[]] cisco.cpm.cluster.impl.BaseServiceInvoker -::: — 正在注册NodeInfoService

2025-01-31 16:11:29,181信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在发送临时同步状态：DBIMPORT_INITIATED，节点同步状态：SYNC_INPROGRESS到PAP。同步请求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在从读取主节点信息：/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier..local值：配置文件中的b33db240-dfbe-11ef-bb78-12467b70bb3d & syncRequestIdentifier :b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 对于syncRequestIdentifier b33db240-dfbe-11ef-bb78-12467b70bb3d，正在将同步状态发送到[https://ise330.tac.local/deployment-rpc/updateSyncStatus]

2025-01-31 16:11:29,199信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 创建http连接管理器

2025-01-31 16:11:29,212调试[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier —> b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:12:27,369信息[main][[]] class com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 在http客户端上设置凭据

2025-01-31 16:12:27,744信息[main][[]]类com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已成功更新同步状态的主要

步骤 11：在ise331上导入DB

ise331-replication.log

2025-01-31 16:12:27,746信息[main][[]]类com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在启动数据库导入……

2025-01-31 16:12:27,746信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要运行的脚本[ /usr/bin/sudo /opt/CSCOcpm/bin/sync_import.sh ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d REGISTER ]

2025-01-31 16:16:20,351信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d::-DB导入已完成。

2025-01-31 16:16:20,351信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要运行的脚本[ /usr/bin/sudo /opt/CSCOcpm/bin/setdbpw.sh primaryUserDbPWD ]

2025-01-31 16:18:32,753信息[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 数据库密码已重置。

2025-01-31 16:18:32,754信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在发送临时同步状态：SECONDARY_SYNC_COMPLETED，节点同步状态：SYNC_COMPLETED到PAP

ise331-ade.log

2025-01-31T16:12:30.546657+05:30 ise331根：info:[sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：正在启动datadump导入……

2025-01-31T16:16:19.734878+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：数据库同步导入已成功完成

导入完成后删除数据库

2025-01-31T16:16:19.895863+05:30 ise331根：info:[application:operation:sync_import.sh]同步完成后从数据库删除调配资源……

2025-01-31T16:16:20.341542+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Released the DATABASE_SYNCIMPORT Lock

2025-01-31T16:16:20.345768+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Datadump导入过程已完成

2025-01-31T16:16:20.738342+05:30 ise331根：info:[application:operation:setdbpw.sh]重置内部数据库用户密码以匹配ISE主要用户的密码

步骤 12：正在将同步完成状态更新为ise330

ise331-replication.log

2025-01-31 16:18:32,754信息[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在发送临时同步状态：SECONDARY_SYNC_COMPLETED，节点同步状态：SYNC_COMPLETED到PAP。同步请求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:29:59,419信息[Psc-SyncStatusUpdaterJob-Thread][[]] Replication-Deployment.PrimaryNodeProxy -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 在完全同步到主objId后发送ise331的sync statusSYNC_COMPLETED:a31cab00-dfbe-11ef-bb78-12467b70bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostConfigMdDate:2025-01-31 16:16:19.880098

ise330-replication.log

2025-01-31 16:29:59,429信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Received status:SYNC COMPLETED,objid:a31cab00-dfbe-11ef-bb78-12467b7 0bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostconfigModDt:2025-01-31 16:16:19.880098 from ise331

2025-01-31 16:29:59,480信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 此更新适用于数据库中找到的最新完全同步信息。

2025-01-31 16:29:59,480信息[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 将ise331的状态从进行中更新为同步已完成

与节点同步问题相关的警报

- 缓慢复制信息

- 复制速度缓慢警告

- 缓慢复制错误

- 复制失败

- 复制已停止

- 节点不同步

已知缺陷

Bug ID

描述

CSCwj67089

通过本地磁盘管理将大文件导入到辅助节点时，思科ISE应用服务器崩溃。

CSCwi78722

Azure VM:无法将节点注册到部署。

CSCwh70275

注册节点时，注销剩余的证书时，当前使用的证书将被删除。

CSCwh08408

由于找不到节点导出器密码，思科ISE版本3.3无法在升级后注册新节点到部署。