瞭解ISE 3.3節點註冊流程

下載選項

  • PDF     (1.8 MB)
    在多種裝置上使用 Adobe Reader 檢視
  • ePub     (1.2 MB)
    在 iPhone、iPad、Android、Sony Reader 或 Windows Phone 上的各種應用程式中檢視
  • Mobi (Kindle)     (1.3 MB)
    在 Kindle 裝置或多部裝置的 Kindle 應用程式上檢視
已更新: 2025 年 3 月 13 日
文件 ID:222828

無偏見用語

本產品的文件集力求使用無偏見用語。針對本文件集的目的，無偏見係定義為未根據年齡、身心障礙、性別、種族身分、民族身分、性別傾向、社會經濟地位及交織性表示歧視的用語。由於本產品軟體使用者介面中硬式編碼的語言、根據 RFP 文件使用的語言，或引用第三方產品的語言，因此本文件中可能會出現例外狀況。深入瞭解思科如何使用包容性用語。

關於此翻譯

思科已使用電腦和人工技術翻譯本文件，讓全世界的使用者能夠以自己的語言理解支援內容。請注意，即使是最佳機器翻譯，也不如專業譯者翻譯的內容準確。Cisco Systems, Inc. 對這些翻譯的準確度概不負責，並建議一律查看原始英文文件（提供連結）。

    簡介

    本文檔介紹身份服務引擎(ISE)節點註冊前提條件、逐步流程、PCAP分析、日誌分析。

    前提條件

    您必須具備思科身份服務引擎(ISE)的基本知識。

    背景資訊

    • 獨立節點：具有單個Cisco ISE節點的部署。此節點運行管理、策略服務和監控角色。
    • 分散式部署：具有多個Cisco ISE節點的部署。為了支援故障轉移和提高效能，您可以設定分散式部署多個思科ISE節點。在Cisco ISE分散式部署中，管理和監控活動是集中化的，處理分佈於策略服務節點。根據您的效能需求，您可以擴展部署。
    • ISE節點可以處於主節點、輔助節點或獨立節點之一。

    • ISE節點可以承擔以下任何角色：管理、策略服務和監控。

    • 您需要執行註冊過程以將更多節點新增到主節點以形成群集。

    需求

    • 安裝ISE節點後，您必須選擇一個節點，並將其狀態從獨立更改為主要。導航到Administration > Deployment，點選ISE節點> Make Primary。
    • 在分散式部署中可以有一個主節點。

    • 要註冊的輔助節點的FQDN必須可從主節點解析。正向和反向DNS查詢必須有效。

    • 兩個節點的版本/修補程式詳細資訊是相同的。

    • 必須具有輔助節點的超級管理員憑據。
    • 確保兩個節點的管理員證書都是受信任的，如果第三方CA簽名的證書，請將根CA新增到受信任的證書儲存中。

    • 節點之間的延遲小於300毫秒。

    所需元件

    本文件中的資訊是以下列軟體和硬體版本為依據

    • 思科身分識別服務引擎3.3
    • ISE VM

    本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。

    所需埠

    • HTTPS(SOAP):TCP/443

    • 資料同步/複製(JGroups):TCP/12001 

    • ISE消息服務：SSL:TCP/8671

    • ISE內部通訊：TCP/15672

    • 探查器端點所有權同步/複製：TCP/6379

    需要調試

    要設定為調試級別的屬性：

    • 複製部署（replication.log和ise-psc.log）
    • Replication-JGroup（replication.log和ise-psc.log）
    • 複製跟蹤器(tracking.log)
    • hibernate(hibernate.log)
    • JMS(replication.log)
    • ca-service(caservice.log)
    • admin-ca(ise-psc.log)

    節點詳細資訊

    • ise330.tac.local(10.127.197.174)是PAN節點
    • ise331.tac.local(10.127.197.175)是SAN節點

    拓撲

    nodes

    涉及的時間戳

    節點ise331.tac.local在ise330.tac.local上註冊

    註冊按一下 — 2025-01-31, 16:00:01 

    下一次按一下（填充輔助節點FQDN詳細資訊後）–2025-01-31,16:00:13 

    提交按一下（選擇角色後）–2025-01-31,16:00:21

    複製–2025-01-31,16:02:22

    已完成同步–2025-01-31 16:30:54

    註冊流程

    節點註冊：從主管理節點到輔助節點的經過身份驗證的配置資料庫複製過程

    步驟 1:將ISE節點設定為主節點

    最初，每個節點都處於獨立模式。要註冊其他節點，請將其中一個節點設定為主節點。

    導航到Administration > Deployment > Click the ISE node/Edit the node。

    按一下「Make Primary」。

    Standalone

    按一下Edit節點。
    Edit

    按一下「Make Primary」和「Save」。

    Primary

    該角色現在成為主角色。

    Primary

    步驟 2:註冊輔助節點

    要註冊的節點必須處於獨立模式。

    轉到輔助節點並獲取FQDN。

    導航到管理>部署。按一下節點名稱。

    Standalone

    轉到PAN GUI。

    導航到管理>部署。

    按一下「Register」。

    它要求註冊節點的FQDN和憑據。

    Register

    輸入輔助節點的FQDN和超級管理員使用者憑據。

    FQDN

    按一下下一步時，它將匯入輔助節點的證書。

    按一下Import certificate（匯入證書），然後繼續。
    Import Certificate

    現在，選擇輔助節點上所需的角色，然後按一下Submit。

    Submit

    Save

    然後，將輔助節點註冊到主節點。按一下確定。

    Warning

    驗證新增到PAN的輔助節點和琥珀色是否表示正在註冊/同步。

    Sync

    步驟 4:選擇輔助管理節點(SAN)時，需要續訂許可證。不適用於PSN。

    導覽至管理>許可。
    按一下Renew Registration。 

    License Renew

    步驟 5:註冊成功。

    Final

    PCAP分析

    在PCAP中，您會看到DNS、443上的證書交換。

    Certificatiom

    DNS流量：按一下註冊並提供FQDN時，主節點會嘗試解析輔助節點的FQDN。

    DNS

    您也可以看到兩個節點之間的證書交換。

    客戶端Hello

    Client hello

    伺服器Hello、證書、伺服器金鑰交換、伺服器Hello

    我們可以看到ise331.tac.local將其證書共用給PAN節點。

    Server hello

    客戶端金鑰交換具有公鑰。 Client Key Exchange

    兩個節點都修復密碼套件並建立加密隧道以共用詳細資訊。

    Change cipher spec

    CLI公用程式 

    • ise-psc.log- DNS查詢/證書驗證/證書複製/同步狀態控制

    根路徑：/opt/CSCOcpm/logs/ise-psc.log 

    在CLI上，

    #show logg應用程式ise-psc.log tail

    • ADE.log — 資料庫匯入/匯出，服務啟動/停止

    來自根的路徑：/var/log/ade/ADE.log

    在CLI上，

    #show logg system ade/ADE.log tail

    • Replication.log — 在DB匯入或DMP檔案傳輸後記錄問題

    根路徑：/opt/CSCOcpm/logs/replication.log

    在CLI上，

    #show application replication.log tail

    • Deployment.log — 與證書和響應頁相關的日誌

    根路徑：/opt/CSCOcpm/logs/deployment.log

    在CLI上，

    #show logging application deployment.log

    日誌分析

    步驟 1:點選註冊ISE節點

    ise330-ise-psc.log: 

    2025-01-31 16:00:01,992 INFO [admin-http-pool2][[]] cpm.admin.infra.spring.ISEAdminControllerUtils -::admin:: — 在action-forwards中找到的對映路徑，轉發到：/pages/modules/infra/deployment/deploymentRegister.jsp

    步驟 2:填充輔助節點的詳細資訊。

    ise330-deployment.log:

    2025-01-31 16:00:11,313 INFO [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331.tac.local:registerNode: — 主機FQDNise331.tac.local的呼叫註冊

    2025-01-31 16:00:11,371 DEBUG [admin-http-pool5][[]] deployment.client.cert.validator.HttpsCertPathValidatorImpl -::admin:ise331.tac.local:registerNode:-cert path valid?true

    ise331-deployment.log 
    2025-01-31 16:00:11,708 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doPost /register
    2025-01-31 16:00:11,710 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doGet/register
    2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檢索到的主主機名是ise330.tac.local

    步驟 3:DNS解析

    ise330- ise-psc.log: 

    2025-01-31 16:00:13,208 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331.tac.local:registerNode: — 正在註冊的Node具有FQDN 'ise331.tac.local'。此名稱解析為IP地址10.127.175

    2025-01-31 16:00:20,638 INFO [admin-http-pool3][[]] cpm.admin.infra.action.DeploymentEditAction -::admin::: — 正在新增的節點是輔助PAP:ise331

    ise331-ise-psc.log
    2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -:::: — 正在檢查主機ise330.tac.local是否可解析dns
    2025-01-31 16:00:11,721 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -::::-Host ise330.tac.local可在5毫秒內解析dns

    步驟4：證書

    ise330-ise.psc.log

    2025-01-31 16:00:20,887 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在準備呼叫getServCert

    ise330-deployment.log 
    2025-01-31 16:00:20,888 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 主機別名：:ise331.tac.local ipAddrString::10.127.197.175 urlStr ::https://ise331.tac.local/admin/API/mnt/api/ServCert

    2025-01-31 16:00:21,419 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- GET:請求tohttps://ise331.tac.local/admin/API/mnt/api/ServCert已完成。

    步驟 5:新增具有已提交角色的輔助節點

    ise330-ise-psc.log
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 收到的NG事件：Add
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current:節點主狀態：待命
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current:NodeRoleStatus:輔助
    2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 當前：HostConfig event hostAlias:ise331.tac.local

    已成功建立並儲存節點詳細資訊

    ise330-deployment.log
    2025-01-31 16:01:22,247 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 已成功建立HostConfig 'ise331'
    2025-01-31 16:01:22,251 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 檢索的HostConfig [hostName=ise331,dispayName=ise331,hostId=5ff70820-dfbe-11ef-bb78-12467b70bb3d，gateWay=1 0.127.197.1、masterStatus=STANDBY、nodeRoleStatus=SECONDARY、nodeTypes=PAP+MNT+PDP、nodeServiceType=SESSION、PROFILER、userName=null、smtpPort=null、smtpHost=null、hostAlias=ise331.tac.local、udiPid=ISE-VM-K9、udiVid=VidSN =S7LEAGKMIHM， udiPT=VM， installType=null， vmInfo=16179780|12|LARGE||2025-01-30 21:44:33 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=5ff70823-dfbe-11ef-bb78-12467b70bb3d， user name=<not shown>, passWd=<not shown>, portNum=1521, sId=cpm10] MasterInterface [id=5ff70822-dfbe-11ef-bb78-12467b70bb3d， userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSLENABLE=FALSE] NICIinterface [id ff70821-dfbe-11ef-bb78-12467b70bb3d，ipAddress=10.127.197.175,subNetMask=255.255.255.0,macAddress=00-50-56-8b-23-2e，nicCards=eth0]

    步驟 6:憑證

    ise330-ise-psc.log
    2025-01-31 16:01:22,251 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 本地證書儲存時註冊節點ise331的主機配置主機Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d。所有本地證書和CSR都使用此hostId引用HostConfig。

    ise330-deployment.log 
    2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在匯入部署共用證書
    2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在準備連線

    2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 已連線到註冊節點
    2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Sending import CertParams to registering node
    2025-01-31 16:01:23,822 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 匯入傳送到註冊節點的CertParams
    2025-01-31 16:01:23,823 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 接收匯入的證書id

    2025-01-31 16:01:24,147 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Imported certs ids received:
    2025-01-31 16:01:24,148 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 匯入部署共用證書 — 完成
    2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 內部getHostConfigForLocalNode以獲取localhostconfig
    2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:-hostName = ise330
    2025-01-31 16:01:24,385 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 檢索的HostConfig [hostName=ise330, dispayName=ise330, hostId=50451540-dee0-11ef-90b1-0050568bb121,gateWay=10 .197.1, masterStatus=ACTIVE， nodeRoleStatus=PRIMARY， nodeTypes=PAP+MNT+PDP， nodeServiceType=SESSION，PROFILER， userName=null， smtpPort=null， smtpHost=null， hostAlias=ise330.tac.local， udiPid=ISE-VM-K9, udiVid=V01, udiSN=IRJN9DCFIG9, udi=VM， installType=null， vmInfo=16179788|12|LARGE|300 GiB|2025-01-31 01:44:51 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=50451543-dee0-11ef-90b1-0050568bb121, userName=<未顯示>, passWd <not shown>, portNum=1521, sId=cpm10] MasterInterface [id=50451542-dee0-11ef-90b1-0050568bb121, userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLEnable=true] NICIinterface [id=50451541-0-11ef-90b10050568 bb121, ipAddress=10.127.197.174, subNetMask=255.255.255.0, macAddress=00-50-56-8b-b1-21, nicCards=eth0]

    萬用字元檢查

    ise-psc.log <==
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地證書通知。
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 本地證書是EAP證書。正在更新KeyAndCertStoreUtil
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.util.KeyAndCertStoreUtil -::admin:ise331:registerNode: — 已收到更新此節點的EAP證書鏈的通知。
    2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 傳送的更新請求。
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地證書通知。
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在檢查證書型別
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 預設自簽名伺服器證書是萬用字元證書：假
    2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在檢查SAML、APNS、CMCS或ProfileSigning證書
    2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 預設自簽名伺服器證書是SAML證書：假
    2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cisco.cpm.provisioning.cert.CertProvisioningFactory -::admin:ise331:registerNode:- CertChangeHandler.handle():在本地證書和信任證書的插入事件上建立EAP證書鏈

    ise330-ise-psc.log 
    2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 儲存的LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241548535177602714336375,issuer=<null>,notBefore=Thu Jan 30 13:32:34 IST 2025,notAfter=Sat Jan 30 13:32:34 IST 2027,subject=CN=ise331.tac.local，issuedTo=ise3 31.tac.local，certificateFilename=<null>,digestHash=<null>],id=f0463881-4c64-4ff5-96a2-4f0089f50459,name=ise331_tac_local#382a40d27abf53ac42387c77#PID$_ISE-VM-K9$_VID$_V01$_SN7LEAGKMIHMname name、friendly =預設自簽名伺服器證書， x509Certificate=null， iseRoles=[EAP， Admin， Portal， DTLS], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01、SN:S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-2, -92, -78, 78, 73, -87, 65, 60, -71, 0, 7, -127, -104, -124, 56, -83], description=null]
    2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在準備儲存LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241611749295087684098633,issuer=<null>,notBefore=Thu Jan 30 13:32:41 IST 2025,notAfter=Tue Jan 29 13:32:41 IST 2030,subject=CN=SAML_ise331.tac.local，issuedTo=SAML local，issuedBy=SAML_ise331.tac.local，certificateFilename=<null>,digestHash=<null>],id=26fd28f0-6346-4fd5-8699-312dfdf97a8e，name=SAML_ise331_tac_local#382a40d5e804fc9a4ba71a49#PID$_ISE-VM-k9 $_VID$_V01$_SN$_S7LEAGKMIHM， friendlyName=預設自簽名saml伺服器證書 — CN=SAML_ise331.tac.local， x509Certificate=null， iseRoles=[NO_SSOCert], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01、SN:S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-18, 47, -17, -88, 79, -30, 69, -12, -73, 120, -111, -36, 40, 27, 43, 68], description=null]主機名：ise331主機配置Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d

    ise330-replication.log 
    2025-01-31 16:01:34,051 DEBUG [admin-http-pool5][[]] cisco.cpm.deployment.replication.PublisherImpl -::admin:ise331:registerNode: — 新增到發佈隊列ID:8afb25b0-dfbe-11ef-bb78-12467b70bb3d， seqNo:0，資料：3058 位元組

    ise330-replication.log 
    2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟蹤註冊並同步正在進入主機的addNodeToDistributionSetup:ise331.tac.local
    2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 輸入addNodeToDistributionSetupUsingJgroups
    2025-01-31 16:02:14,501 INFO [admin-http-pool5][[]] api.services.persistance.dao.ReplicationStatusDAOImpl -::admin:ise331:registerNode: — 主機名：ise331,DB 'SEC_REPLICATIONSTATUS' =正在進行，節點角色：SECONDARY， ReplicationStatus對象狀態：SYNC_INPROGRESS
    2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 退出addNodeToDistributionSetupUsingJgroups
    2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟蹤註冊並同步完成addNodeToDistributionSetup for host:ise331.tac.local

    2025-01-31 16:02:14,508 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 輸入offerSyncRequestToQueue
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::admin:ise331:registerNode: — 已建立FullSyncInfo[ a31cab00-dfbe-11ef-bb78-12467b70bb3d ]
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync同步請求是hostFQDN[ise331.tac.local] exportFilePath[null] syncRequestIdentifier[null] syncRequestTime[null] syncStatus[SYNC_INSYNCInSYNC] TRANSIENTSyncStatus[NULL] SYNCRequestType[REGISTER]
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 退出offerSyncRequestToQueue

    步驟 7:在群集中註冊節點

    ise330-ise-psc.log 
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.DistributionImpl -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 節點ise331的新註冊碼已完成
    2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 節點ise331已成功向個人管理、監控、策略服務註冊

    步驟 8:防火牆規則

    ise330-ise-psc.log

    2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.174]

    2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:-syncUpfwList:允許對ips進行DB訪問：[10.127.197.175]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:不允許對ips進行DB訪問：[]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 為jGroup應用防火牆規則

    2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 適用於jGroup的應用的防火牆規則。

    2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

    2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

    2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的防火牆規則。

    2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 為節點組應用防火牆規則。

    2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已應用節點組的防火牆規則。

    2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

    2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

    2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

    2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

    2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的已應用防火牆規則。

    2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 正在對節點組應用防火牆規則。

    2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 節點組的已應用防火牆規則。

    ise331-ise-psc.lohg

    2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.174]

    2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允許ips訪問DB:[10.127.197.175]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:不允許對ips進行DB訪問：[]

    2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 為jGroup應用防火牆規則

    2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 適用於jGroup的應用的防火牆規則。

    2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

    2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

    2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

    2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的防火牆規則。

    2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 為節點組應用防火牆規則。

    2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已應用節點組的防火牆規則。

    2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

    2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

    2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

    2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

    2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的已應用防火牆規則。

    2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 正在對節點組應用防火牆規則。

    2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 節點組的已應用防火牆規則。

    步驟 9:Datadump匯出直到當前系統更改編號(SCN)並將檔案傳輸到ise331

    ise330-ade.log

    2025-01-31T16:02:41.682824+05:30 ise330根：info:[sync_export.sh]正在啟動同步識別符號b33db240-dfbe-11ef-bb78-12467b70bb3d的資料泵匯出……

    2025-01-31T16:02:43.545110+05:30 ise330根：info:[sync_export.sh] SCN retrieved for sync identifier b33db240-dfbe-11ef-bb78-12467b70bb3d...現在開始匯出CSCN 6022419和主機ise330025-01-31T16:09:35.095186+05:30 ise330 root:info:[sync_export.sh]同步識別符號b33db240-dfbe-11ef-bb78-12467b70bb3d的匯出成功……

    ise330-replication.log

    2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Processing Sync請求
    2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，null
    2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Found 1個同步請求。
    2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb 78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d2025-01-31 16:02:41,584 INFO [Deployment-Sync-Manager-Thread-0][] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467 b70bb3d:FullSync:-Tracking RegistrationAndSync — 為識別符號啟動的匯出指令碼[b33db240-dfbe-11ef-bb78-12467b70bb3d]
    2025-01-31 16:02:41,586 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:

    2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 匯出指令碼已完成識別符號[b33db240-be 1ef-bb78-12467b70bb3d] returnVal + 0
    2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-DB匯出已完成:returnValue:0
    2025-01-31 16:09:40,603 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 已匯出資料庫轉儲:/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp大小（位元組）：131614567
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 建立文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 建立文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立的屬性檔案
    2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立檔案/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks
    2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立的檔案/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks
    2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 已建立證書
    2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78 12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d
    2025-01-31 16:09:40,696 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 同步請求主機FQDN[ise331.tac.local] exportFile路徑[/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp] sync請求識別符號[b33db240-dfbe-11ef-bb78-12467b70bb3d] syncRequestTime[Fri Jan 31 16:14:40 IST 2025] syncStatus[SYNC_INPROGRESS] transientSyncStatus[DBEXPORT_SUCCEEDED] syncRequestType[REGISTER]
    2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 使用ise331b33db240-dfbe-11ef-bb將未來對象新增到對映78-12467b70bb3d， syncThreadsFutureMap:{ise331b33db240-dfbe-11ef-bb78-12467b70bb3d=java.util.concurrent.FutureTask@25d5b491}
    2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 執行器執行緒池超時設定為：300（分鐘）
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 已啟動主機：ise331的Sync執行緒部署 — SyncRequest-Thread-0執行，同步識別符號：b33db240-dfbe-11ef-bb78-12467b70bb3d
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 覆蓋從2025年1月31日16:14:40至2025年1月31日16:09:40的同步開始時間

    傳輸同步檔案

    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -::::: — 正在傳輸同步文件……
    2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp]，大小（位元組）：[131614567]
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks]，大小（位元組）：[25683]
    2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties]，大小（位元組）：[263]
    2025-01-31 16:09:40,706 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ repo_random.key]，大小（以位元組為單位）：[24]
    2025-01-31 16:09:41,920 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 建立http連線管理器
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::: — 在http客戶端上設定憑據
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟蹤RegistrationAndSync — 開始將檔案傳輸到輔助節點ise331.tac.local
    2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟蹤RegistrationAndSync — 輔助url ishttps://ise331.tac.local/deployment-rpc/uploadSyncFiles

    2025-01-31 16:09:52,567 WARN [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 已成功將檔案傳輸到輔助節點ise331.tac.local
    2025-01-31 16:09:52,568 WARN [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 上載完成，響應=
    2025-01-31 16:09:52,568 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d
    2025-01-31 16:09:52,570 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -::::-Sync已傳輸文件。現在正在輔助節點上啟動同步進程……

    步驟 10:從ise330接收檔案

    ise331-replication.log

    2025-01-31 16:09:45,814資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 正在啟動receiveSyncFiles PAP:

    2025-01-31 16:09:45,819資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync - Inside downloadSyncFilesAndVerify :請求org.apache.catalina.connector.RequestFacade@524def8e響應：org.apache.catalina.connector.ResponseFacade@51b18399

    2025-01-31 16:09:45,821資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 同步的最大上載檔案計數設定為：6

    2025-01-31 16:09:48,164資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 下載的專案數：6

    2025-01-31 16:09:48,190資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,228警告[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269]

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp，檔名= null，內容型別= null，檔案大小= 131614567

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks，檔名= null，內容型別= null，檔案大小= 25683

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties，檔名= null，內容型別= null，檔案大小= 263

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：repo_random.key

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= repo_random.key，檔名= null，內容型別= null，檔案大小= 24

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：repo_random.key

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：repo_random.key

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：checkSum

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：syncRequestIdentifier

    2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 即將驗證AndPrepareForSync

    2025-01-31 16:09:49,243資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::-檔案下載)cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmpconfig_b33db240-dfbe-11ef-bb78-12467b70bb3d.propertiesprimaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

    2025-01-31 16:09:50,294資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269] primaryCheckSum [9d2a72222b701adc669f8a85e 83eca3bbeead3fe025fbac94e9d77fc8fb269]

    2025-01-31 16:09:52,544資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 跟蹤RegistrationAndSync — 已完成receiveSyncFilesTracking RegistrationAndSync -

    2025-01-31 16:09:52,901資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 即將啟動Sync

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 從PAP接收的syncRequestIdentifier:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 從PAP接收的secondaryHostName:ise331.tac.local

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已從PAP接收primUserDbPwd

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 從PAP接收的dataDirectDbPwd

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Received nodeExporterPwd from PAP

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已從PAP接收piProfilerMetricPwd

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已從PAP接收primKekKey

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received papAdminPwd from PAP

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received syncRequestType from PAP:報名

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-即將呼叫startImportSyncPollerScript

    2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::::: — 呼叫同步輪詢器以等待同步完成ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d [PrimaryDBPSWD] REGISTER

    2025-01-31 16:09:53,082資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::: — 正在返回同步輪詢器以等待同步完成

    2025-01-31 16:09:53,083資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-呼叫startImportSyncPollerScript

    2025-01-31 16:10:16,217調試[main][[]] cisco.cpm.cluster.impl.BaseServiceInvoker -:::: — 正在註冊NodeInfoService

    2025-01-31 16:11:29,181資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在傳送臨時同步狀態：DBIMPORT_INITIATED、節點同步狀態：SYNC_INPROGRESS到PAP。同步請求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在從讀取主節點資訊：/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

    2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier..local值：b33db240-dfbe-11ef-bb78-12467b70bb3d & syncRequestIdentifier in config file :b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 對於syncRequestIdentifier b33db240-dfbe-11ef-bb78-12467b70bb3d，正在將同步狀態傳送到[https://ise330.tac.local/deployment-rpc/updateSyncStatus]

    2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在建立http連線管理器

    2025-01-31 16:11:29,212調試[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-syncRequestIdentifier —> b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:12:27,369資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 在http客戶端上設定憑據

    2025-01-31 16:12:27,744資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已成功更新同步狀態的主節點

    步驟 11:ISE331上的DB匯入

    ise331-replication.log

    2025-01-31 16:12:27,746資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在啟動DB導入。

    2025-01-31 16:12:27,746資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要運行的指令碼[ /usr/bin/sudo /opt/CSCOcpm/bin/sync_import.sh ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d REGISTER ]

    2025-01-31 16:16:20,351資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d::-DB匯入已完成。

    2025-01-31 16:16:20,351資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要運行的指令碼[ /usr/bin/sudo /opt/CSCOcpm/bin/setdbpw.sh primaryUserDbPWD ]

    2025-01-31 16:18:32,753資訊[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已重置資料庫密碼。

    2025-01-31 16:18:32,754資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d: — 正在傳送臨時同步狀態：SECONDARY_SYNC_COMPLETED，節點同步狀態：SYNC_COMPLETED到PAP

    ise331-ade.log

    2025-01-31T16:12:30.546657+05:30 ise331根：info:[sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：正在啟動datadump匯入……

    2025-01-31T16:16:19.734878+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：資料庫同步匯入已成功完成

    匯入完成後刪除資料庫

    2025-01-31T16:16:19.895863+05:30 ise331根：info:[application:operation:sync_import.sh]同步完成後從資料庫中刪除調配資源……

    2025-01-31T16:16:20.341542+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:已釋放DATABASE_SYNCIMPORT鎖

    2025-01-31T16:16:20.345768+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Datadump匯入過程已完成

    2025-01-31T16:16:20.738342+05:30 ise331根：info:[application:operation:setdbpw.sh]重置內部資料庫使用者密碼以與ISE主使用者密碼匹配

    步驟 12:正在將同步完成狀態更新為ise330

    ise331-replication.log

    2025-01-31 16:18:32,754資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d: — 正在傳送瞬態同步狀態：SECONDARY_SYNC_COMPLETED，節點同步狀態：SYNC_COMPLETED到PAP。同步請求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

    2025-01-31 16:29:59,419資訊[Psc-SyncStatusUpdaterJob-Thread][[]] Replication-Deployment.PrimaryNodeProxy -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 在完全同步到Primary、objId後傳送ise331的sync statusSYNC_COMPLETED:a31cab00-dfbe-11ef-bb78-12467b70bb3d， syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d， hostConfigMdDate:2025-01-31 16:16:19.880098

    ise330-replication.log

    2025-01-31 16:29:59,429資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Received status:SYNC COMPLETED,objid:a31cab00-be-11ef-bb78-12467b7 0bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostconfigModDt:2025-01-31 16:16:19.880098 from ise331

    2025-01-31 16:29:59,480資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 此更新適用於資料庫中找到的最新完整同步資訊。

    2025-01-31 16:29:59,480資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 將ise331的狀態從進行中更新到SYNC COMPLETED

    與節點同步問題相關的警報

    • 慢速複製資訊
    • 複製速度慢警告
    • 慢速複製錯誤
    • 複製失敗
    • 複製已停止
    • 節點不同步

    已知瑕疵

    錯誤ID

    說明

    CSCwj67089

    通過本地磁碟管理將大型檔案匯入輔助節點時，Cisco ISE應用伺服器崩潰。

    CSCwi78722

    Azure VM:無法將節點註冊到部署。

    CSCwh70275

    在註銷中註冊剩餘證書的節點時，將刪除當前正在使用的證書。

    CSCwh08408

    由於找不到節點匯出器密碼，思科ISE版本3.3無法在部署升級後註冊新節點。

    修訂記錄

    修訂 發佈日期 意見
    1.0
    13-Mar-2025
    初始版本
    TAC Authored

    由思科工程師貢獻

    • 卡納馬爾拉普迪·文卡塔·拉克什米·巴爾加維
      技術諮詢工程師

    這份文件是否有所幫助？

    Feedback意見

    讓思科協助您

    本文件適用於這些產品