目录

简介

先决条件

要求

使用的组件

背景信息

配置

ISE 配置

思科DNA配置

验证

故障排除

A 部分：思科DNA上的日志消息流以实现成功集成

B部分：ISE上的日志消息流（ISE PSC日志）

简介

本文档介绍使用pxGrid连接将ISE 3.3与思科DNA中心(DNAC)集成的过程。

先决条件

- ERS读写访问。

- ISE和Catalyst Center之间没有代理服务器。

- 需要在ISE上启用PxGrid。

- 集成需要FQDN，而不仅仅是IP地址（证书）。

- 如果使用企业颁发的证书，则需要Catalyst Center集群的VIP +实际ip。

- ISE上的CLI凭证不再用于集成，仅支持基于API的访问。

- 需要IP可达性。

要求

Cisco 建议您了解以下主题：

- 身份服务引擎3.3

- 思科DNA

使用的组件

本文档中的信息基于以下软件和硬件版本：

- 身份服务引擎版本3.3

- 思科DNA

本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始（默认）配置。如果您的网络处于活动状态，请确保您了解所有命令的潜在影响。

背景信息

SD-Access解决方案通过Cisco Catalyst Center、Cisco®身份服务引擎(ISE)以及具有交换矩阵功能的有线和无线设备平台的组合提供。

通过Cisco Catalyst Center软件实现Cisco Catalyst Center的自动化、分析、可视性和管理。SD-Access是此软件的一部分，用于设计、调配、应用策略，并在确保创建智能有线和无线园区网络时提供便利。

ISE是SD-Access不可或缺的组件，用于实施网络访问控制策略。ISE执行策略实施，实现用户和设备到可扩展组的动态映射，并简化端到端安全策略实施。在ISE中，用户和设备以简单灵活的界面显示。ISE通过思科平台交换网格(pxGrid)和具象状态传输(REST)API与Cisco Catalyst Center集成，用于终端事件通知和ISE上策略配置的自动化。

了解思科身份服务引擎(ISE)是思科DNA中心的重要组成部分，这一点至关重要。它提供核心的基于意图的服务，例如：

1. AAA（RADIUS和TACACS+）

2.网络可视性

3.用户和设备自注册

4.安全政策

5.宏观和微观分段

要使用这些服务，Cisco DNA Center必须与ISE集成，以建立可信的关系。本指南提供完成集成过程的逐步说明。

配置

ISE 配置

步骤 1：必须在ISE上启用Pxgrid。

必须在System > Deployment > Edit Node > PxGrid下启用PxGrid服务，如图所示：

注意：如果是分布式环境，您可以在两个ISE节点上运行pxgrid角色。在分布式环境中，建议在非管理节点上运行pxgrid角色。

步骤 2：启用RESTful服务(ERS)读/写：

要在ISE上启用具象状态传输(REST)和应用编程接口(API)服务，必须在Administration > System > Settings > ERS Settings > Enable ERS for Read/Write下启用ERS读/写，如图所示：

注意：在分布式ISE环境中，确保选中Enable ERS for Read，否则，ERS会话可在主管理员上启动，但在辅助上无法启动。

步骤 3：确保两个设置均已启用，如管理> pxGrid服务>设置所示。

启用自动批准新的基于证书的帐户。

启用允许基于密码的帐户创建。

这允许自动批准pxGrid客户端。

思科DNA配置

步骤 1：登录思科DNAGUI.

步骤 2：导航到System Settings > Settings > Authentication and Policy Servers。

步骤 3：单击 Add。从下拉列表中选择ISE:

步骤 4：添加所有详细信息，如下所示：

服务器ip地址：ISE主管理节点的IP地址。

共享密钥:这是交换机的Radius共享密钥，当它们被思科DNA作为网络设备推送到ISE时。

用户名/密码：ISE管理员凭证。

FQDN：ISE主管理节点FQDN。

用户名称：这是Cisco DNA向ISE Pxgrid发起订阅请求时，ISE上的Pxgrid服务下显示的名称。

验证

- 导航至System Settings > Settings > Authentication and Policy Servers。

- ISE集成状态将显示为Active。

导航到设置>系统360:

ISE服务器在External Connected Systems下显示为Available，如下所示：

故障排除

在ISE中将这些组件设置为调试级别：

- PxGrid

- 基础设施

- Ers

注意：开始思科DNA-ISE集成之前，请使用以下命令跟踪服务日志：

可以使用以下命令在Cisco DNA CLI上实时检查日志：

- maglev$ magctl service logs -rf ise-bridge

- maglev$ magctl service logs -rf network-design -c network-design-service

A 部分：思科DNA上的日志消息流以实现成功集成

步骤 1：正在获取ISE凭证。

2025/06/07 17:21:41 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

025-06-07 17:21:41,905 |信息 | messageListenerContainer-6 |  | c.c.a.c.c.impl.AAARasClientImpl | AAARasClientImpl — 创建api。RBAC uuid — 空 | correlationId=1978f306-0857-467d-b974-6444a163f742

2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |步骤：正在获取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=1978f306-0857-467d-b974-6444a163f742

2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |为ISE Trust CREATE调用GO服务 | correlationId=1978f306-0857-467d-b974-6444a163f742

2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |使用ip为ISE的CREATE请求建立API目录以调用GO服务：10.127.196.71和主机名：l | correlationId=1978f306-0857-467d-b974-6444a163f742

步骤 2：证书错误，等待接受证书是否为自签名且不受信任。

06/07 17:21:42 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:21:42 [DEBUG] GET https://10.127.196.71/admin/API/PKI/TrustCertificates

2025/06/07 17:21:44 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

2025-06-07 17:21:44,730 |信息 | qtp480903748-238          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE集成状态步骤 | correlationId=831c9c36-d534-415d-86d6-

2025-06-07 17:21:44,964 |错误 | messageListenerContainer-6 |  | c.c.a.c.s.h.CreateAaaMessageHandler |证书正在等待用户接受{} | correlationId=1978f306-0857-467d-b974-6444a163f742

com.cisco.apicem.commonsettings.service.exception.CertificateWaitingUserAcceptanceException:{"i18n":{"code":"NCND80015"}}

在com.cisco.apicem.commonsettings.service.util.GoTrustEstablishmentUtil.callGoServiceForTrustProcessing(GoTrustEstablishmentUtil.java:139)~[classes/:na]

在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrustWithPAN(CiscoISEManager.java:215)~[classes/:na]

在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrust(CiscoISEManager.java:184)~[classes/:na]

在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:554)~[classes/:na]

在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:536)~[classes/:na]

在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRequest(CreateAaaMessageHandler.java:143)~[classes/:na]

在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler_aroundBody0(GrapevineMessageListener.java:485)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

在com.cisco.grapevine.amqp.impl.GrapevineMessageListener$AjcClosure1.run(GrapevineMessageListener.java:1)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:167)~[aspectjrt-1.9.6.jar:na]

在com.cisco.enc.i18n.localization.aop.EnableI18nOnRequestHandler.getEmptyResponse(EnableI18nOnRequestHandler.java:26)~[i18n-7.1.722.60901.jar:7.1.722.60901]

在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler(GrapevineMessageListener.java:452)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.onMessage(GrapevineMessageListener.java:273)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.doInvokeListener(AbstractMessageListenerContainer.java:856)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.invokeListener(AbstractMessageListenerContainer.java:779)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$001(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$1.invokeListener(SimpleMessageListenerContainer.java:208)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.invokeListener(SimpleMessageListenerContainer.java:1381)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.executeListener(AbstractMessageListenerContainer.java:760)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.doReceiveAndExecute(SimpleMessageListenerContainer.java:1324)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.receiveAndExecute(SimpleMessageListenerContainer.java:1294)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$1800(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$AsyncMessageProcessingConsumer.run(SimpleMessageListenerContainer.java:1550)~[spring-rabbit-1.7.15.RELEASE.jar:na]

在java.base/java.lang.Thread.run(Thread.java:834)~[na:na]

2025-06-07 17:21:46,284 |信息 | qtp480903748-916          |  | c.c.a.c.s.util.CommonSettingsUtil |检索MultiCisco DNAConfigurationTable = MultiCisco DNAConfigurationTable[clusterUuid=878771ce-8f93-44a5-82c9-3561e14c2d77,createTime=2024-08-23 14:18:11.381,inMultiCisco DNAMode=false，lastUpdatedA time=2024-08-23 14:18:11.381,multiCisco DNAFeatureEnabled=false，instanceUuid=7f606daa-ca05-472b-b45c-fe8dfead1717,instanceId=7007,authEntityId=7007,authEntityClass=1586401731,instanceTenantA id=66c88fc4104bfb741d052de9,_orderedListOEIndex=<整数>,_creationOrderIndex=<整数>,_isBeingChanged=<布尔值>,deployPending=<DeployPendingEnum>,instanceCreatedOn=<时间戳>,instanceUpdatedOn=<时间戳>,instanceVersion=1] | correlationId=5888c4bb-f407-4771-97e6-e5c9a9e08746

步骤 3：已调用证书接受。

17:22:05,574 |信息 | qtp480903748-909          |  | c.c.a.c.s.controller.AAAController |用户是否接受传入证书？:true | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,581 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.h.CreateAaaMessageHandler | 进入用户证书确认阶段 | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |步骤：正在获取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager | ISE的Calling GO service trust CERT_ACCEPT | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |使用ip为ISE的CERT_ACCEPT请求建立API对等点以调用GO服务：10.127.196.71和主机名： | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

步骤 4：建立信任。

2025-06-07 17:22:06,365 |信息 | qtp480903748-246          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE集成状态步骤 | correlationId=c1bfde32-4cec-4c9f-afab-06291f1bc437

2025-06-07 17:22:06,375 |信息 | qtp480903748-909          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =ESTABLISHING_TRUST_WITH_ISE的ISE集成状态步骤 | correlationId=fbba646c-bdae-4554-8c70-0a5836f4c860

步骤 5：检查ISE ERS配置。

2025/06/07 17:22:06 [DEBUG] GET https://10.127.196.71/admin/API/NetworkAccessConfig/ERS

{"asctime":"2025-06-07T17:22:07.529Z","correlationId":"","level":"info","msg":"ISE {XMLName:{Space:Local:ersConfig} ID:1 ISCSRF:false IsPAP:true IsPSNS:true}","packagename":"ISE连接管理器"}

步骤 6：正在验证ISE版本。

2025/06/07 17:22:07 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:07 [DEBUG] GET https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

{"asctime":"2025-06-07T17:22:09.065Z","correlationId":"","level":"info","msg":" ISE版本为{Version:3.3 Patch:0 PatchList:0}","packagename":"ISE连接管理器"}

步骤 7：正在获取遥测信息。

2025/06/07 17:22:09 [DEBUG] GET https://10.127.196.71:9060/ers/config/telemetryinfo

{"asctime":"2025-06-07T17:22:10.161Z","correlationId":"","level":"info","msg":"遥测ID 30d43265-1577-4e02-a10b-6b549099f544","packagename":"实用程序"}

{"asctime":"2025-06-07T17:22:10.161Z","correlationId":"","level":"info","msg":"Check and enable openAPI on ISE nodes","packagename":"ISE Connection Manager"}

步骤 8::正在从ISE获取API状态。

2025/06/07 17:22:10 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:10 [DEBUG] GET https://10.127.196.71/admin/API/apiService/get

{"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"OpenAPI已启用，{true}","packagename":"ISE连接管理器"}

步骤 9：与ISE的信任建立已完成。

{"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"Updating overall status to trusted","packagename":"ISE Connection Manager"}

2025/06/07 17:22:11 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

{"asctime":"2025-06-07T17:22:11.304Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"acc84e0a-cfdb-48a4-2f56eafe5490\",\"描述\":\"\",\"故障原因\":\"\",\"fqdn\":\"l\",\"ip地址\":\"10.127.196.71\",\"操作类型\":\"更新\",\"角色\":\"主\",\"状态\":\"活动\",\"用户名称\":\"pxgrid_client_1749316904\",\"trustState\":\"受信任的\"}],\"ipH address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

{"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"节点更新状态到NDS，响应代码200 OK","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"Sending certificates to NDS","packagename":"ISE Connection Manager"}

{"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在添加{17487437175958362366089997042 CREATE}","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载[{\"序列号\":\"17487437175958362366089997042\",\"颁发者\":\"CN=l\",\"操作类型\":\"CREATE\"}]","数据包名称":"ndsutil"}

2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/iseCerts

{"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"Node update status to NDS，响应代码200 OK","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"Updating ISE Step ESTABLISHING_TRUST_WITH_ISE with status COMPLETE","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"ESTABLISHING_TRUST_WITH_ISE\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

步骤 10：发现ISE部署中的节点。

{"asctime":"2025-06-07T17:22:11.339Z","correlationId":"","level":"info","msg":"Updating ISE Step DISCOVERING_NODES with status IN_PROGRESS","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:11.339Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

2025/06/07 17:22:11 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

{"asctime":"2025-06-07T17:22:11.348Z","correlationId":"","level":"info","msg":"Posted ISE integration Step to NDS， http response code=200","packagename":"ndsutil"}

2025/06/07 17:22:11 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:11 [DEBUG] GET https://10.127.196.71/admin/API/Infra/Node/SimpleList

{"asctime":"2025-06-07T17:22:12.512Z","correlationId":"","level":"info","msg":"66c88fc4104bfb741d052de9:b745dd4f-2a22-47d8-a216-6a5a85f3ea69从ISE接收4节点","PACKAGENAME":"ISE连接管理器"}

{"asctime":"2025-06-07T17:22:12.512Z","correlationId":"","level":"info","msg":"添加主PAN节点本地化33ppan/10.127.196.71，角色PRIMARY","packagename":"ISE连接管理器"}

de localize33ppan/10.127.196.71, role PRIMARY","packagename":"ISE Connection Manager"}

2025/06/07 17:22:12 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:12 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33localspan

{"asctime":"2025-06-07T17:22:13.612Z","correlationId":"","level":"info","msg":"添加辅助PAN节点i

{"asctime":"2025-06-07T17:22:13.612Z","correlationId":"","level":"info","msg":"添加MnT主节点

2025/06/07 17:22:13 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:13 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33seclocal

{"asctime":"2025-06-07T17:22:14.737Z","correlationId":"","level":"info","msg":"正在添加pxgrid节点

2025/06/07 17:22:14 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:14 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/isepxgrid2025

{"asctime":"2025-06-07T17:22:15.863Z","correlationId":"","level":"info","msg":"正在添加PSN节点isepxgrid2025.localad.com/10.127.196.74","packagename":"ISE连接管理器"}

2025/06/07 17:22:15 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:15 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/localise33ppan

{"asctime":"2025-06-07T17:22:17.047Z","correlationId":"","level":"info","msg":"Adding PSN node l/10.127.196.71"," packagename":"ISE连接管理器"}

步骤 11：节点发现已完成。

2025/06/07 17:22:17 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

{"asctime":"2025-06-07T17:22:17.843Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"49523ddb-e1d5-c53d-1e20-01f8509a3c28\",\"说明\":\",\"故障原因\":\"\",\"fqdn\":\\",\"ip地址\":\"10.127.196.73\",\"操作类型\":\"创建\",\"角色\":\"辅助\",\"状态\":\"活动\",\"用户名称\":\"pxgrid_client_1749316904\",\"trustState\":\"受信任\"}],\"ipA address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

2025/06/07 17:22:17 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

{"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"Node update status to NDS，响应代码200 OK","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"Updating ISE Step DISCOVERING_NODES with status COMPLETE"," packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"向NDS发送请求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

步骤 12：正在获取ISE本地证书。

{"asctime":"2025-06-07T17:22:17.871Z","correlationId":"","level":"info","msg":"GetCertChainForISERole 、角色EAP和节点l"、"packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:17.871Z","correlationId":"","level":"info","msg":"从ISE 10.127.196.71","packagename":"证书管理器"}

2025/06/07 17:22:17 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:17 [DEBUG] GET https://10.127.196.71/admin/API/PKI/LocalCertificates

{"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"构建枝叶证书的证书链。Node=10.127.196.71;cname=","packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"证书是自签名。Subject=CN和Issuer=CN，跳过证书链生成","packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"Inserting into iseCerts","packagename":"DAL"}

{"asctime":"2025-06-07T17:22:19.276Z","correlationId":"","level":"info","msg":"Successfully inserted into iseCerts"," packagename":"DAL"}

2025/06/07 17:22:19 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

步骤 13：Pxgrid连接检查。

{"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"PxGrid is enabled","packagename":"ISE连接管理器"}

{"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status IN_PROGRESS","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

2025/06/07 17:22:19 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

{"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Posted ISE Integration Step to NDS， http response code=200","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"获取并生成节点10.127.196.72的管理证书链","packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Fetching server certificate for 10.127.196.72","packagename":"Certificate Manager"}

{"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"fetted server cert chain for 10.127.196.72, chain length 4","packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"检查对等体是否提供了完整的证书链，链长度=4","packagename":"证书管理器"}

{"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"Node=10.127.196.72;cname=","packagename":"Certificate Manager"}

{"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"插入ise-bridge certpool。Issuer=CN=Certificate Services Node CA - localize33ppan;Subject=CN=Certificate Services Endpoint Sub CA - ise33seclocal;  序列号=336164adf99b4663b51c7d8787b671e2","packagename":"Certificate Manager"}

2025/06/07 17:22:20 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

{"asctime":"2025-06-07T17:22:20.920Z","correlationId":"","level":"info","msg":"正在将节点状态更新发送到NDS。负载{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"dad546ca-fe8f-28d9-a112-56ecade00239\",\"说明\":\"\",\"故障原因\":\"\",\"fqdn\":\"\",\"ip地址\":\"10.127.196.72\",\"操作类型\":\"CREATE\",\"role\":\"PXGRID\",\"状态\":\"非活动\",\"subscriberName\":\"pxgrid_client_1749316904\",\"trustState\":\"TRUSTED\"}],\"ipGrid address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

2025/06/07 17:22:20 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

{"asctime":"2025-06-07T17:22:20.936Z","correlationId":"","level":"info","msg":"节点更新状态到NDS，响应代码200 OK","packagename":"ndsutil"}

步骤 14：证书更新。

{"asctime":"2025-06-07T17:22:22.585Z","correlationId":"","level":"info","msg":"从ISE获取终端证书， \u026{CertTemplateName:pxGrid_Certificate_Template Format:PKCS8_CHAIN密码：CertificateRequest:{San:52:ad:88:67:42:58 Cn:admin_66c88fc4104bfb741d052de9}","packagename":"PxGridClient"}

2025/06/07 17:22:22 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

2025/06/07 17:22:22 [调试] PUT https://10.127.196.71:9060/ers/config/endpointcert/certRequest

{"asctime":"2025-06-07T17:22:24.071Z","correlationId":"","level":"info","msg":"Inserting into iseCerts","packagename":"DAL"}

{"asctime":"2025-06-07T17:22:24.072Z","correlationId":"","level":"info","msg":"Successfully inserted into iseCerts"," packagename":"DAL"}

步骤 15：Pxgrid客户端激活。

{"asctime":"2025-06-07T17:22:24.074Z","correlationId":"","level":"info","msg":"Successfully loaded privateKey from endpoint certs","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:24.074Z","correlationId":"","level":"info","msg":"客户端证书链1 ","packagename":"PxGridClient"}中的证书条目数

2025/06/07 17:22:24 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/AccountActivate

{"asctime":"2025-06-07T17:22:25.247Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccountActivate","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:25.247Z","correlationId":"","level":"info","msg":"GOT ACCOUNT ACTIVATE RESPONSE:\u0026{AccountState:ENABLED Version:2.0}","packagename":"PxGridClient"}

2025/06/07 17:22:25 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/ServiceLookup

{"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/ServiceLookup","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"尝试连接pubsub service \u026{Name:com.cisco.ise.pubsub NodeName:~ise-pubsub-ise33seclocal Properties:map[wsUrl:wss://:8910/pxgrid/ise/pubsub]} ","packagename":"pxGridClient"}

{"asctime":"2025-06-07T17:22:26.311Z","correlationId":"","level":"info","msg":"ISE Pubsub Web Service URL:wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"PxGridClient"}

2025/06/07 17:22:26 [DEBUG] POST https://10.127.196.72:8910/pxgrid/control/AccessSecret

{"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccessSecret","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"正在尝试拨号到wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"ws-endpoint"}

{"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Connected to wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"ws-endpoint"}

2025/06/07 17:22:28 [DEBUG] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

{"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Setting as active pxgrid node","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:28.533Z","correlationId":"","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status COMPLETE","packagename":"ndsutil"}

{"asctime":"2025-06-07T17:22:28.533Z","correlationId":"","level":"info","msg":"正在向NDS发送请求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

2025/06/07 17:22:28 [调试] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

2025/06/07 17:22:28 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

第16步：Trustsec SGT下载。

{"asctime":"2025-06-07T17:22:34.370Z","correlationId":"","level":"info","msg":"BULK DOWNLOADING FOR SERVICE com.cisco.ise.config.trustsec TOPIC securityGroupTopic","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:34.371Z","correlationId":"","level":"info","msg":"Bulkdownload URLs:[https://10.127.196.71:8910/pxgrid/ise/config/trustsec]","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:34.371Z","correlationId":"","level":"info","msg":"正在尝试使用https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}批量下载com.cisco.ise.config.trustsec

2025/06/07 17:22:34 [DEBUG] POST https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups

{"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}

{"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Reset Security Group Cache.","packagename":"cache"}

{"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Updating Security Group Cache","packagename":"cache"}

{"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"SG bulkdownload data， ACA尚未注册，请不要推送到RMQ","packagename":"Subscribers"}

{"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"完成订阅所有主题并完成批量下载","packagename":"ISE连接管理器"}

B部分：ISE上的日志消息流（ISE PSC日志）

步骤 1：正在获取节点详细信息。

2025-06-07 22:45:22,788 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::- Basic authentication successful。用户名：admin

2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/node

2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/node

2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —>getLocalPort=9060

2:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@2ff9a8ef

2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@39c857df

2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@24e4889c

2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -:::- DEBUG INFO — 结果com.cisco.cpm.ers.app.proxy.HostConfigProxy@73eb7edf

2025-06-07 22:45:22,802 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources request for resource type 'node'已成功完成

步骤 2：ISE上的版本检查。

2025-06-07 22:48:39,847 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -:::: — 身份验证基于密码，跳过基于证书的身份验证

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -:::::- ### PAPFilter.doFilter —> getMethod=GET

2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getRemoteHost=10.62.113.211

步骤 3：正在获取遥测信息。

2025-06-07 22:48:41,371 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -:::: — 身份验证基于密码，跳过基于证书的身份验证

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/telemetryinfo

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/telemetryinfo

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:48:41,372 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getPathInfo=/telemetryinfo

2025-06-07 22:48:41,374 INFO [ers-http-pool15][[]] ers.app.impl.handlers.TelemetryInfoCRUDHandler -::: — 在GET ALL API内

2025-06-07 22:48:41,377 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources request for resource type 'telemetryinfo'已成功完成

步骤 4：ISE使用基于REST的请求获取集成中的信息。

2025-06-07 22:49:00,957 INFO [ers-http-pool18][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -:::: — 基本身份验证成功。用户名：admin

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/sessionservicenode

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>继续执行ERS请求，当前桶计数为：49

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getPathInfo=/sessionservicenode

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getMethod=GET

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][]] cpm.ers.app.web.PICFilter -::::- ### PICFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -:::::- ### PICFilter.doFilter —> getRemoteHost=10.62.113.211