将ISE 3.3与DNAC集成

下载选项

  • PDF     (1.3 MB)
    在各种设备上使用 Adobe Reader 查看
  • ePub     (1.0 MB)
    在 iPhone、iPad、Android、Sony Reader 或 Windows Phone 上使用各种应用查看
  • Mobi (Kindle)     (748.4 KB)
    在 Kindle 设备上查看或在多个设备上使用 Kindle 应用查看
已更新: 2025 年 6 月 27 日
文档 ID:223162

非歧视性语言

此产品的文档集力求使用非歧视性语言。在本文档集中，非歧视性语言是指不隐含针对年龄、残障、性别、种族身份、族群身份、性取向、社会经济地位和交叉性的歧视的语言。由于产品软件的用户界面中使用的硬编码语言、基于 RFP 文档使用的语言或引用的第三方产品使用的语言，文档中可能无法确保完全使用非歧视性语言。 深入了解思科如何使用包容性语言。

关于此翻译

思科采用人工翻译与机器翻译相结合的方式将此文档翻译成不同语言，希望全球的用户都能通过各自的语言得到支持性的内容。 请注意：即使是最好的机器翻译，其准确度也不及专业翻译人员的水平。 Cisco Systems, Inc. 对于翻译的准确性不承担任何责任，并建议您总是参考英文原始文档（已提供链接）。

    简介

    本文档介绍使用pxGrid连接将ISE 3.3与思科DNA中心(DNAC)集成的过程。

    先决条件

    • ERS读写访问。
    • ISE和Catalyst Center之间没有代理服务器。
    • 需要在ISE上启用PxGrid。
    • 集成需要FQDN，而不仅仅是IP地址（证书）。
    • 如果使用企业颁发的证书，则需要Catalyst Center集群的VIP +实际ip。
    • ISE上的CLI凭证不再用于集成，仅支持基于API的访问。
    • 需要IP可达性。

    要求

    Cisco 建议您了解以下主题：

    • 身份服务引擎3.3
    • 思科DNA

    使用的组件

    本文档中的信息基于以下软件和硬件版本：

    • 身份服务引擎版本3.3

    • 思科DNA

    本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始（默认）配置。如果您的网络处于活动状态，请确保您了解所有命令的潜在影响。

    背景信息

    SD-Access解决方案通过Cisco Catalyst Center、Cisco®身份服务引擎(ISE)以及具有交换矩阵功能的有线和无线设备平台的组合提供。

    通过Cisco Catalyst Center软件实现Cisco Catalyst Center的自动化、分析、可视性和管理。SD-Access是此软件的一部分，用于设计、调配、应用策略，并在确保创建智能有线和无线园区网络时提供便利。

    ISE是SD-Access不可或缺的组件，用于实施网络访问控制策略。ISE执行策略实施，实现用户和设备到可扩展组的动态映射，并简化端到端安全策略实施。在ISE中，用户和设备以简单灵活的界面显示。ISE通过思科平台交换网格(pxGrid)和具象状态传输(REST)API与Cisco Catalyst Center集成，用于终端事件通知和ISE上策略配置的自动化。

    了解思科身份服务引擎(ISE)是思科DNA中心的重要组成部分，这一点至关重要。它提供核心的基于意图的服务，例如：

    1. AAA（RADIUS和TACACS+）    

    2.网络可视性

    3.用户和设备自注册    

    4.安全政策        

    5.宏观和微观分段

    要使用这些服务，Cisco DNA Center必须与ISE集成，以建立可信的关系。本指南提供完成集成过程的逐步说明。

    配置

    ISE 配置

    步骤 1：必须在ISE上启用Pxgrid。

    必须在System > Deployment > Edit Node > PxGrid下启用PxGrid服务，如图所示：

    Pxgrid must be Enabled on ISE

    note-icon

    注意：如果是分布式环境，您可以在两个ISE节点上运行pxgrid角色。在分布式环境中，建议在非管理节点上运行pxgrid角色。

    步骤 2：启用RESTful服务(ERS)读/写：

    要在ISE上启用具象状态传输(REST)和应用编程接口(API)服务，必须在Administration > System > Settings > ERS Settings > Enable ERS for Read/Write下启用ERS读/写，如图所示：

    Enable RESTful Services (ERS) Read/Write

    note-icon

    注意：在分布式ISE环境中，确保选中Enable ERS for Read，否则，ERS会话可在主管理员上启动，但在辅助上无法启动。

    步骤 3：确保两个设置均已启用，如管理> pxGrid服务>设置所示。

    启用自动批准新的基于证书的帐户。

    启用允许基于密码的帐户创建。

    这允许自动批准pxGrid客户端。

    Both Settings are Enabled

    思科DNA配置

    步骤 1：登录思科DNAGUI.

    步骤 2：导航到System Settings > Settings > Authentication and Policy Servers。

    Navigate to System Settings, Settings, Authentication and Policy Servers

    步骤 3：单击 Add。从下拉列表中选择ISE:

    Click Add

    步骤 4：添加所有详细信息，如下所示：

    服务器ip地址：ISE主管理节点的IP地址。

    共享密钥:这是交换机的Radius共享密钥，当它们被思科DNA作为网络设备推送到ISE时。

    用户名/密码：ISE管理员凭证。

    FQDN：ISE主管理节点FQDN。

    用户名称：这是Cisco DNA向ISE Pxgrid发起订阅请求时，ISE上的Pxgrid服务下显示的名称。

    Add in the Server IP Address and FQDN

    Initiate Connection

    Integration in Progress

    验证

    • 导航至System Settings > Settings > Authentication and Policy Servers。 
    • ISE集成状态将显示为Active。

    Verify ISE Integration Status is Active

    导航到设置>系统360:

    ISE服务器在External Connected Systems下显示为Available，如下所示：

    ISE Servers Show as Available

    故障排除

    在ISE中将这些组件设置为调试级别：

    • PxGrid
    • 基础设施
    • Ers
    note-icon

    注意：开始思科DNA-ISE集成之前，请使用以下命令跟踪服务日志：

    可以使用以下命令在Cisco DNA CLI上实时检查日志： 

    • maglev$ magctl service logs -rf ise-bridge
    • maglev$ magctl service logs -rf network-design -c network-design-service

    A 部分：思科DNA上的日志消息流以实现成功集成

    步骤 1：正在获取ISE凭证。

    2025/06/07 17:21:41 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    025-06-07 17:21:41,905 |信息 | messageListenerContainer-6 |  | c.c.a.c.c.impl.AAARasClientImpl | AAARasClientImpl — 创建api。RBAC uuid — 空 | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |步骤：正在获取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |为ISE Trust CREATE调用GO服务 | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |使用ip为ISE的CREATE请求建立API目录以调用GO服务：10.127.196.71和主机名：l | correlationId=1978f306-0857-467d-b974-6444a163f742

    步骤 2：证书错误，等待接受证书是否为自签名且不受信任。

    06/07 17:21:42 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:21:42 [DEBUG] GET https://10.127.196.71/admin/API/PKI/TrustCertificates

    2025/06/07 17:21:44 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    2025-06-07 17:21:44,730 |信息 | qtp480903748-238          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE集成状态步骤 | correlationId=831c9c36-d534-415d-86d6-

    2025-06-07 17:21:44,964 |错误 | messageListenerContainer-6 |  | c.c.a.c.s.h.CreateAaaMessageHandler |证书正在等待用户接受{} | correlationId=1978f306-0857-467d-b974-6444a163f742

    com.cisco.apicem.commonsettings.service.exception.CertificateWaitingUserAcceptanceException:{"i18n":{"code":"NCND80015"}}

            在com.cisco.apicem.commonsettings.service.util.GoTrustEstablishmentUtil.callGoServiceForTrustProcessing(GoTrustEstablishmentUtil.java:139)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrustWithPAN(CiscoISEManager.java:215)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrust(CiscoISEManager.java:184)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:554)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:536)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRequest(CreateAaaMessageHandler.java:143)~[classes/:na]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler_aroundBody0(GrapevineMessageListener.java:485)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener$AjcClosure1.run(GrapevineMessageListener.java:1)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:167)~[aspectjrt-1.9.6.jar:na]

            在com.cisco.enc.i18n.localization.aop.EnableI18nOnRequestHandler.getEmptyResponse(EnableI18nOnRequestHandler.java:26)~[i18n-7.1.722.60901.jar:7.1.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler(GrapevineMessageListener.java:452)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.onMessage(GrapevineMessageListener.java:273)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.doInvokeListener(AbstractMessageListenerContainer.java:856)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.invokeListener(AbstractMessageListenerContainer.java:779)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$001(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$1.invokeListener(SimpleMessageListenerContainer.java:208)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.invokeListener(SimpleMessageListenerContainer.java:1381)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.executeListener(AbstractMessageListenerContainer.java:760)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.doReceiveAndExecute(SimpleMessageListenerContainer.java:1324)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.receiveAndExecute(SimpleMessageListenerContainer.java:1294)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$1800(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$AsyncMessageProcessingConsumer.run(SimpleMessageListenerContainer.java:1550)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            在java.base/java.lang.Thread.run(Thread.java:834)~[na:na]

    2025-06-07 17:21:46,284 |信息 | qtp480903748-916          |  | c.c.a.c.s.util.CommonSettingsUtil |检索MultiCisco DNAConfigurationTable = MultiCisco DNAConfigurationTable[clusterUuid=878771ce-8f93-44a5-82c9-3561e14c2d77,createTime=2024-08-23 14:18:11.381,inMultiCisco DNAMode=false，lastUpdatedA time=2024-08-23 14:18:11.381,multiCisco DNAFeatureEnabled=false，instanceUuid=7f606daa-ca05-472b-b45c-fe8dfead1717,instanceId=7007,authEntityId=7007,authEntityClass=1586401731,instanceTenantA id=66c88fc4104bfb741d052de9,_orderedListOEIndex=<整数>,_creationOrderIndex=<整数>,_isBeingChanged=<布尔值>,deployPending=<DeployPendingEnum>,instanceCreatedOn=<时间戳>,instanceUpdatedOn=<时间戳>,instanceVersion=1] | correlationId=5888c4bb-f407-4771-97e6-e5c9a9e08746

    步骤 3：已调用证书接受。

    17:22:05,574 |信息 | qtp480903748-909          |  | c.c.a.c.s.controller.AAAController |用户是否接受传入证书？:true | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,581 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.h.CreateAaaMessageHandler | 进入用户证书确认阶段 | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |步骤：正在获取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager | ISE的Calling GO service trust CERT_ACCEPT | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |使用ip为ISE的CERT_ACCEPT请求建立API对等点以调用GO服务：10.127.196.71和主机名： | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    步骤 4：建立信任。

    2025-06-07 17:22:06,365 |信息 | qtp480903748-246          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE集成状态步骤 | correlationId=c1bfde32-4cec-4c9f-afab-06291f1bc437

    2025-06-07 17:22:06,375 |信息 | qtp480903748-909          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =ESTABLISHING_TRUST_WITH_ISE的ISE集成状态步骤 | correlationId=fbba646c-bdae-4554-8c70-0a5836f4c860

    步骤 5：检查ISE ERS配置。

    2025/06/07 17:22:06 [DEBUG] GET https://10.127.196.71/admin/API/NetworkAccessConfig/ERS

    {"asctime":"2025-06-07T17:22:07.529Z","correlationId":"","level":"info","msg":"ISE {XMLName:{Space:Local:ersConfig} ID:1 ISCSRF:false IsPAP:true IsPSNS:true}","packagename":"ISE连接管理器"}

    步骤 6：正在验证ISE版本。

    2025/06/07 17:22:07 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:07 [DEBUG] GET https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    {"asctime":"2025-06-07T17:22:09.065Z","correlationId":"","level":"info","msg":" ISE版本为{Version:3.3 Patch:0 PatchList:0}","packagename":"ISE连接管理器"}

    步骤 7：正在获取遥测信息。

    2025/06/07 17:22:09 [DEBUG] GET https://10.127.196.71:9060/ers/config/telemetryinfo

    {"asctime":"2025-06-07T17:22:10.161Z","correlationId":"","level":"info","msg":"遥测ID 30d43265-1577-4e02-a10b-6b549099f544","packagename":"实用程序"}

    {"asctime":"2025-06-07T17:22:10.161Z","correlationId":"","level":"info","msg":"Check and enable openAPI on ISE nodes","packagename":"ISE Connection Manager"}

    步骤 8::正在从ISE获取API状态。

    2025/06/07 17:22:10 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:10 [DEBUG] GET https://10.127.196.71/admin/API/apiService/get

    {"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"OpenAPI已启用，{true}","packagename":"ISE连接管理器"}

    步骤 9：与ISE的信任建立已完成。

    {"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"Updating overall status to trusted","packagename":"ISE Connection Manager"}

    2025/06/07 17:22:11 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:11.304Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"acc84e0a-cfdb-48a4-2f56eafe5490\",\"描述\":\"\",\"故障原因\":\"\",\"fqdn\":\"l\",\"ip地址\":\"10.127.196.71\",\"操作类型\":\"更新\",\"角色\":\"主\",\"状态\":\"活动\",\"用户名称\":\"pxgrid_client_1749316904\",\"trustState\":\"受信任的\"}],\"ipH address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"节点更新状态到NDS，响应代码200 OK","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"Sending certificates to NDS","packagename":"ISE Connection Manager"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在添加{17487437175958362366089997042 CREATE}","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载[{\"序列号\":\"17487437175958362366089997042\",\"颁发者\":\"CN=l\",\"操作类型\":\"CREATE\"}]","数据包名称":"ndsutil"}

    2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/iseCerts

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"Node update status to NDS，响应代码200 OK","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"Updating ISE Step ESTABLISHING_TRUST_WITH_ISE with status COMPLETE","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"ESTABLISHING_TRUST_WITH_ISE\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    步骤 10：发现ISE部署中的节点。

    {"asctime":"2025-06-07T17:22:11.339Z","correlationId":"","level":"info","msg":"Updating ISE Step DISCOVERING_NODES with status IN_PROGRESS","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.339Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    {"asctime":"2025-06-07T17:22:11.348Z","correlationId":"","level":"info","msg":"Posted ISE integration Step to NDS， http response code=200","packagename":"ndsutil"}

    2025/06/07 17:22:11 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:11 [DEBUG] GET https://10.127.196.71/admin/API/Infra/Node/SimpleList

    {"asctime":"2025-06-07T17:22:12.512Z","correlationId":"","level":"info","msg":"66c88fc4104bfb741d052de9:b745dd4f-2a22-47d8-a216-6a5a85f3ea69从ISE接收4节点","PACKAGENAME":"ISE连接管理器"}

    {"asctime":"2025-06-07T17:22:12.512Z","correlationId":"","level":"info","msg":"添加主PAN节点本地化33ppan/10.127.196.71，角色PRIMARY","packagename":"ISE连接管理器"}

    de localize33ppan/10.127.196.71, role PRIMARY","packagename":"ISE Connection Manager"}

    2025/06/07 17:22:12 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:12 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33localspan

    {"asctime":"2025-06-07T17:22:13.612Z","correlationId":"","level":"info","msg":"添加辅助PAN节点i

    {"asctime":"2025-06-07T17:22:13.612Z","correlationId":"","level":"info","msg":"添加MnT主节点

    2025/06/07 17:22:13 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:13 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33seclocal

    {"asctime":"2025-06-07T17:22:14.737Z","correlationId":"","level":"info","msg":"正在添加pxgrid节点

    2025/06/07 17:22:14 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:14 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/isepxgrid2025

    {"asctime":"2025-06-07T17:22:15.863Z","correlationId":"","level":"info","msg":"正在添加PSN节点isepxgrid2025.localad.com/10.127.196.74","packagename":"ISE连接管理器"}

    2025/06/07 17:22:15 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:15 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/localise33ppan

    {"asctime":"2025-06-07T17:22:17.047Z","correlationId":"","level":"info","msg":"Adding PSN node l/10.127.196.71"," packagename":"ISE连接管理器"}

    步骤 11：节点发现已完成。

    2025/06/07 17:22:17 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:17.843Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"49523ddb-e1d5-c53d-1e20-01f8509a3c28\",\"说明\":\",\"故障原因\":\"\",\"fqdn\":\\",\"ip地址\":\"10.127.196.73\",\"操作类型\":\"创建\",\"角色\":\"辅助\",\"状态\":\"活动\",\"用户名称\":\"pxgrid_client_1749316904\",\"trustState\":\"受信任\"}],\"ipA address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:17 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"Node update status to NDS，响应代码200 OK","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"Updating ISE Step DISCOVERING_NODES with status COMPLETE"," packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"向NDS发送请求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

    步骤 12：正在获取ISE本地证书。

    {"asctime":"2025-06-07T17:22:17.871Z","correlationId":"","level":"info","msg":"GetCertChainForISERole 、角色EAP和节点l"、"packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:17.871Z","correlationId":"","level":"info","msg":"从ISE 10.127.196.71","packagename":"证书管理器"}

    2025/06/07 17:22:17 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:17 [DEBUG] GET https://10.127.196.71/admin/API/PKI/LocalCertificates

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"构建枝叶证书的证书链。Node=10.127.196.71;cname=","packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"证书是自签名。Subject=CN和Issuer=CN，跳过证书链生成","packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"Inserting into iseCerts","packagename":"DAL"}

    {"asctime":"2025-06-07T17:22:19.276Z","correlationId":"","level":"info","msg":"Successfully inserted into iseCerts"," packagename":"DAL"}

    2025/06/07 17:22:19 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    步骤 13：Pxgrid连接检查。

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"PxGrid is enabled","packagename":"ISE连接管理器"}

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status IN_PROGRESS","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

    2025/06/07 17:22:19 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Posted ISE Integration Step to NDS， http response code=200","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"获取并生成节点10.127.196.72的管理证书链","packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Fetching server certificate for 10.127.196.72","packagename":"Certificate Manager"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"fetted server cert chain for 10.127.196.72, chain length 4","packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"检查对等体是否提供了完整的证书链，链长度=4","packagename":"证书管理器"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"Node=10.127.196.72;cname=","packagename":"Certificate Manager"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"插入ise-bridge certpool。Issuer=CN=Certificate Services Node CA - localize33ppan;Subject=CN=Certificate Services Endpoint Sub CA - ise33seclocal;  序列号=336164adf99b4663b51c7d8787b671e2","packagename":"Certificate Manager"}

    2025/06/07 17:22:20 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:20.920Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"dad546ca-fe8f-28d9-a112-56ecade00239\",\"说明\":\"\",\"故障原因\":\"\",\"fqdn\":\"\",\"ip地址\":\"10.127.196.72\",\"操作类型\":\"CREATE\",\"role\":\"PXGRID\",\"状态\":\"非活动\",\"subscriberName\":\"pxgrid_client_1749316904\",\"trustState\":\"TRUSTED\"}],\"ipGrid address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:20 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:20.936Z","correlationId":"","level":"info","msg":"节点更新状态到NDS，响应代码200 OK","packagename":"ndsutil"}

    步骤 14：证书更新。

    {"asctime":"2025-06-07T17:22:22.585Z","correlationId":"","level":"info","msg":"从ISE获取终端证书， \u026{CertTemplateName:pxGrid_Certificate_Template Format:PKCS8_CHAIN密码：CertificateRequest:{San:52:ad:88:67:42:58 Cn:admin_66c88fc4104bfb741d052de9}","packagename":"PxGridClient"}

    2025/06/07 17:22:22 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:22 [调试] PUT https://10.127.196.71:9060/ers/config/endpointcert/certRequest

    {"asctime":"2025-06-07T17:22:24.071Z","correlationId":"","level":"info","msg":"Inserting into iseCerts","packagename":"DAL"}

    {"asctime":"2025-06-07T17:22:24.072Z","correlationId":"","level":"info","msg":"Successfully inserted into iseCerts"," packagename":"DAL"}

    步骤 15：Pxgrid客户端激活。

    {"asctime":"2025-06-07T17:22:24.074Z","correlationId":"","level":"info","msg":"Successfully loaded privateKey from endpoint certs","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:24.074Z","correlationId":"","level":"info","msg":"客户端证书链1 ","packagename":"PxGridClient"}中的证书条目数

    2025/06/07 17:22:24 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/AccountActivate

    {"asctime":"2025-06-07T17:22:25.247Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccountActivate","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:25.247Z","correlationId":"","level":"info","msg":"GOT ACCOUNT ACTIVATE RESPONSE:\u0026{AccountState:ENABLED Version:2.0}","packagename":"PxGridClient"}

    2025/06/07 17:22:25 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/ServiceLookup

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/ServiceLookup","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"尝试连接pubsub service \u026{Name:com.cisco.ise.pubsub NodeName:~ise-pubsub-ise33seclocal Properties:map[wsUrl:wss://:8910/pxgrid/ise/pubsub]} ","packagename":"pxGridClient"}

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"ISE Pubsub Web Service URL:wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"PxGridClient"}

    2025/06/07 17:22:26 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/AccessSecret

    {"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccessSecret","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"正在尝试拨号到wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"ws-endpoint"}

    {"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Connected to wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"ws-endpoint"}

    2025/06/07 17:22:28 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    {"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Setting as active pxgrid node","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:28.533Z","correlationId":"","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status COMPLETE","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:28.533Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

    2025/06/07 17:22:28 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    2025/06/07 17:22:28 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    第16步：Trustsec SGT下载。

    {"asctime":"2025-06-07T17:22:34.370Z","correlationId":"","level":"info","msg":"BULK DOWNLOADING FOR SERVICE com.cisco.ise.config.trustsec TOPIC securityGroupTopic","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:34.371Z","correlationId":"","level":"info","msg":"Bulkdownload URLs:[https://10.127.196.71:8910/pxgrid/ise/config/trustsec]","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:34.371Z","correlationId":"","level":"info","msg":"正在尝试使用https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}批量下载com.cisco.ise.config.trustsec

    2025/06/07 17:22:34 [DEBUG] POST https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Reset Security Group Cache.","packagename":"cache"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Updating Security Group Cache","packagename":"cache"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"SG bulkdownload data， ACA尚未注册，请不要推送到RMQ","packagename":"Subscribers"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"完成订阅所有主题并完成批量下载","packagename":"ISE连接管理器"}

    B部分：ISE上的日志消息流（ISE PSC日志）

    步骤 1：正在获取节点详细信息。

    2025-06-07 22:45:22,788 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::- Basic authentication successful。用户名：admin

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/node

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/node

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —>getLocalPort=9060

    2:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@2ff9a8ef

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@39c857df

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@24e4889c

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@73eb7edf

    2025-06-07 22:45:22,802 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources request for resource type 'node'已成功完成

    步骤 2：ISE上的版本检查。

    2025-06-07 22:48:39,847 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -:::: — 身份验证基于密码，跳过基于证书的身份验证

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -:::::- ### PAPFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getRemoteHost=10.62.113.211

    步骤 3：正在获取遥测信息。

    2025-06-07 22:48:41,371 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -:::: — 身份验证基于密码，跳过基于证书的身份验证

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:41,372 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,374 INFO [ers-http-pool15][[]] ers.app.impl.handlers.TelemetryInfoCRUDHandler -::: — 在GET ALL API内

    2025-06-07 22:48:41,377 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources request for resource type 'telemetryinfo'已成功完成

    步骤 4：ISE使用基于REST的请求获取集成中的信息。

    2025-06-07 22:49:00,957 INFO [ers-http-pool18][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.PICFilter -::::- ### PICFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    修订历史记录

    版本 发布日期 备注
    1.0
    27-Jun-2025
    初始版本
    TAC Authored

    由思科工程师提供

    • 达薇亚·辛哈
      技术咨询工程师

    此文档是否有帮助?

    Feedback反馈

    联系我们

    本文档适用于以下产品