目錄

簡介

前提條件

背景資訊

需求

所需元件

所需埠

需要調試

節點詳細資訊

拓撲

涉及的時間戳

註冊流程

PCAP分析

CLI公用程式

日誌分析

與節點同步問題相關的警報

已知瑕疵

簡介

本文檔介紹身份服務引擎(ISE)節點註冊前提條件、逐步流程、PCAP分析、日誌分析。

前提條件

您必須具備思科身份服務引擎(ISE)的基本知識。

背景資訊

- 獨立節點：具有單個Cisco ISE節點的部署。此節點運行管理、策略服務和監控角色。

- 分散式部署：具有多個Cisco ISE節點的部署。為了支援故障轉移和提高效能，您可以設定分散式部署多個思科ISE節點。在Cisco ISE分散式部署中，管理和監控活動是集中化的，處理分佈於策略服務節點。根據您的效能需求，您可以擴展部署。

- ISE節點可以處於主節點、輔助節點或獨立節點之一。

- ISE節點可以承擔以下任何角色：管理、策略服務和監控。

- 您需要執行註冊過程以將更多節點新增到主節點以形成群集。

需求

- 安裝ISE節點後，您必須選擇一個節點，並將其狀態從獨立更改為主要。導航到Administration > Deployment，點選ISE節點> Make Primary。

- 在分散式部署中可以有一個主節點。

- 要註冊的輔助節點的FQDN必須可從主節點解析。正向和反向DNS查詢必須有效。

- 兩個節點的版本/修補程式詳細資訊是相同的。

- 必須具有輔助節點的超級管理員憑據。

- 確保兩個節點的管理員證書都是受信任的，如果第三方CA簽名的證書，請將根CA新增到受信任的證書儲存中。

- 節點之間的延遲小於300毫秒。

所需元件

本文件中的資訊是以下列軟體和硬體版本為依據

- 思科身分識別服務引擎3.3

- ISE VM

本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。

所需埠

- HTTPS(SOAP):TCP/443

- 資料同步/複製(JGroups):TCP/12001

- ISE消息服務：SSL:TCP/8671

- ISE內部通訊：TCP/15672

- 探查器端點所有權同步/複製：TCP/6379

需要調試

要設定為調試級別的屬性：

- 複製部署（replication.log和ise-psc.log）

- Replication-JGroup（replication.log和ise-psc.log）

- 複製跟蹤器(tracking.log)

- hibernate(hibernate.log)

- JMS(replication.log)

- ca-service(caservice.log)

- admin-ca(ise-psc.log)

節點詳細資訊

- ise330.tac.local(10.127.197.174)是PAN節點

- ise331.tac.local(10.127.197.175)是SAN節點

拓撲

涉及的時間戳

節點ise331.tac.local在ise330.tac.local上註冊

註冊按一下 — 2025-01-31, 16:00:01

下一次按一下（填充輔助節點FQDN詳細資訊後）–2025-01-31,16:00:13

提交按一下（選擇角色後）–2025-01-31,16:00:21

複製–2025-01-31,16:02:22

已完成同步–2025-01-31 16:30:54

註冊流程

節點註冊：從主管理節點到輔助節點的經過身份驗證的配置資料庫複製過程

步驟 1:將ISE節點設定為主節點

最初，每個節點都處於獨立模式。要註冊其他節點，請將其中一個節點設定為主節點。

導航到Administration > Deployment > Click the ISE node/Edit the node。

按一下「Make Primary」。

按一下Edit節點。

按一下「Make Primary」和「Save」。

該角色現在成為主角色。

步驟 2:註冊輔助節點

要註冊的節點必須處於獨立模式。

轉到輔助節點並獲取FQDN。

導航到管理>部署。按一下節點名稱。

轉到PAN GUI。

導航到管理>部署。

按一下「Register」。

它要求註冊節點的FQDN和憑據。

輸入輔助節點的FQDN和超級管理員使用者憑據。

按一下下一步時，它將匯入輔助節點的證書。

按一下Import certificate（匯入證書），然後繼續。

現在，選擇輔助節點上所需的角色，然後按一下Submit。

然後，將輔助節點註冊到主節點。按一下確定。

驗證新增到PAN的輔助節點和琥珀色是否表示正在註冊/同步。

步驟 4:選擇輔助管理節點(SAN)時，需要續訂許可證。不適用於PSN。

導覽至管理>許可。

按一下Renew Registration。

步驟 5:註冊成功。

PCAP分析

在PCAP中，您會看到DNS、443上的證書交換。

DNS流量：按一下註冊並提供FQDN時，主節點會嘗試解析輔助節點的FQDN。

您也可以看到兩個節點之間的證書交換。

客戶端Hello

伺服器Hello、證書、伺服器金鑰交換、伺服器Hello

我們可以看到ise331.tac.local將其證書共用給PAN節點。

客戶端金鑰交換具有公鑰。

兩個節點都修復密碼套件並建立加密隧道以共用詳細資訊。

CLI公用程式

- ise-psc.log- DNS查詢/證書驗證/證書複製/同步狀態控制

根路徑：/opt/CSCOcpm/logs/ise-psc.log

在CLI上，

#show logg應用程式ise-psc.log tail

- ADE.log — 資料庫匯入/匯出，服務啟動/停止

來自根的路徑：/var/log/ade/ADE.log

在CLI上，

#show logg system ade/ADE.log tail

- Replication.log — 在DB匯入或DMP檔案傳輸後記錄問題

根路徑：/opt/CSCOcpm/logs/replication.log

在CLI上，

#show application replication.log tail

- Deployment.log — 與證書和響應頁相關的日誌

根路徑：/opt/CSCOcpm/logs/deployment.log

在CLI上，

#show logging application deployment.log

日誌分析

步驟 1:點選註冊ISE節點

ise330-ise-psc.log:

2025-01-31 16:00:01,992 INFO [admin-http-pool2][[]] cpm.admin.infra.spring.ISEAdminControllerUtils -::admin:: — 在action-forwards中找到的對映路徑，轉發到：/pages/modules/infra/deployment/deploymentRegister.jsp

步驟 2:填充輔助節點的詳細資訊。

ise330-deployment.log:

2025-01-31 16:00:11,313 INFO [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331.tac.local:registerNode: — 主機FQDNise331.tac.local的呼叫註冊

2025-01-31 16:00:11,371 DEBUG [admin-http-pool5][[]] deployment.client.cert.validator.HttpsCertPathValidatorImpl -::admin:ise331.tac.local:registerNode:-cert path valid?true

ise331-deployment.log

2025-01-31 16:00:11,708 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doPost /register

2025-01-31 16:00:11,710 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-Received request for doGet/register

2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檢索到的主主機名是ise330.tac.local

步驟 3:DNS解析

ise330- ise-psc.log:

2025-01-31 16:00:13,208 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331.tac.local:registerNode: — 正在註冊的Node具有FQDN 'ise331.tac.local'。此名稱解析為IP地址10.127.175

2025-01-31 16:00:20,638 INFO [admin-http-pool3][[]] cpm.admin.infra.action.DeploymentEditAction -::admin::: — 正在新增的節點是輔助PAP:ise331

ise331-ise-psc.log

2025-01-31 16:00:11,716 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -:::: — 正在檢查主機ise330.tac.local是否可解析dns

2025-01-31 16:00:11,721 INFO [admin-http-pool14][[]] epm.pap.api.handler.CommonUtil -::::-Host ise330.tac.local可在5毫秒內解析dns

步驟4：證書

ise330-ise.psc.log

2025-01-31 16:00:20,887 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在準備呼叫getServCert

ise330-deployment.log

2025-01-31 16:00:20,888 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 主機別名：:ise331.tac.local ipAddrString::10.127.197.175 urlStr ::https://ise331.tac.local/admin/API/mnt/api/ServCert

2025-01-31 16:00:21,419 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:- GET:請求tohttps://ise331.tac.local/admin/API/mnt/api/ServCert已完成。

步驟 5:新增具有已提交角色的輔助節點

ise330-ise-psc.log

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 收到的NG事件：Add

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current:節點主狀態：待命

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode:-Current:NodeRoleStatus:輔助

2025-01-31 16:00:21,905 INFO [admin-http-pool5][[]] cisco.mnt.dbms.handler.DataSourceReInitializingHandler -::admin:ise331:registerNode: — 當前：HostConfig event hostAlias:ise331.tac.local

已成功建立並儲存節點詳細資訊

ise330-deployment.log

2025-01-31 16:01:22,247 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 已成功建立HostConfig 'ise331'

2025-01-31 16:01:22,251 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 檢索的HostConfig [hostName=ise331,dispayName=ise331,hostId=5ff70820-dfbe-11ef-bb78-12467b70bb3d，gateWay=1 0.127.197.1、masterStatus=STANDBY、nodeRoleStatus=SECONDARY、nodeTypes=PAP+MNT+PDP、nodeServiceType=SESSION、PROFILER、userName=null、smtpPort=null、smtpHost=null、hostAlias=ise331.tac.local、udiPid=ISE-VM-K9、udiVid=VidSN =S7LEAGKMIHM， udiPT=VM， installType=null， vmInfo=16179780|12|LARGE||2025-01-30 21:44:33 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=5ff70823-dfbe-11ef-bb78-12467b70bb3d， user name=<not shown>, passWd=<not shown>, portNum=1521, sId=cpm10] MasterInterface [id=5ff70822-dfbe-11ef-bb78-12467b70bb3d， userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSLENABLE=FALSE] NICIinterface [id ff70821-dfbe-11ef-bb78-12467b70bb3d，ipAddress=10.127.197.175,subNetMask=255.255.255.0,macAddress=00-50-56-8b-23-2e，nicCards=eth0]

步驟 6:憑證

ise330-ise-psc.log

2025-01-31 16:01:22,251 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 本地證書儲存時註冊節點ise331的主機配置主機Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d。所有本地證書和CSR都使用此hostId引用HostConfig。

ise330-deployment.log

2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在匯入部署共用證書

2025-01-31 16:01:22,841 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 正在準備連線

2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 已連線到註冊節點

2025-01-31 16:01:23,804 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Sending import CertParams to registering node

2025-01-31 16:01:23,822 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 匯入傳送到註冊節點的CertParams

2025-01-31 16:01:23,823 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 接收匯入的證書id

2025-01-31 16:01:24,147 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode:-Imported certs ids received:

2025-01-31 16:01:24,148 DEBUG [admin-http-pool5][[]] cpm.infrastructure.deployment.client.DeploymentRegistrationClient -::admin:ise331:registerNode: — 匯入部署共用證書 — 完成

2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 內部getHostConfigForLocalNode以獲取localhostconfig

2025-01-31 16:01:24,382 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode:-hostName = ise330

2025-01-31 16:01:24,385 DEBUG [admin-http-pool5][[]] cisco.cpm.infrastructure.deployment.DeploymentManager -::admin:ise331:registerNode: — 檢索的HostConfig [hostName=ise330, dispayName=ise330, hostId=50451540-dee0-11ef-90b1-0050568bb121,gateWay=10 .197.1, masterStatus=ACTIVE， nodeRoleStatus=PRIMARY， nodeTypes=PAP+MNT+PDP， nodeServiceType=SESSION，PROFILER， userName=null， smtpPort=null， smtpHost=null， hostAlias=ise330.tac.local， udiPid=ISE-VM-K9, udiVid=V01, udiSN=IRJN9DCFIG9, udi=VM， installType=null， vmInfo=16179788|12|LARGE|300 GiB|2025-01-31 01:44:51 IST|0 MB|0 MHz|4294967295 MB|5000 MHz， isApiNode=false] DBIinterface [id=50451543-dee0-11ef-90b1-0050568bb121, userName=<未顯示>, passWd <not shown>, portNum=1521, sId=cpm10] MasterInterface [id=50451542-dee0-11ef-90b1-0050568bb121, userName=<not shown>, passWd=<not shown>, portNum=80, domainName=Default Domain， contextRoot=admin， serviceType=WEBSERVICE， isSSLEnable=true] NICIinterface [id=50451541-0-11ef-90b10050568 bb121, ipAddress=10.127.197.174, subNetMask=255.255.255.0, macAddress=00-50-56-8b-b1-21, nicCards=eth0]

萬用字元檢查

ise-psc.log <==

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地證書通知。

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 本地證書是EAP證書。正在更新KeyAndCertStoreUtil

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.util.KeyAndCertStoreUtil -::admin:ise331:registerNode: — 已收到更新此節點的EAP證書鏈的通知。

2025-01-31 16:01:25,304 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.IseEapCertNotificationHandler -::admin:ise331:registerNode: — 傳送的更新請求。

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 已收到ISE本地證書通知。

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在檢查證書型別

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 預設自簽名伺服器證書是萬用字元證書：假

2025-01-31 16:01:25,305 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 正在檢查SAML、APNS、CMCS或ProfileSigning證書

2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cpm.infrastructure.certreqmgmt.notifications.WildcardCertNotificationHandler -::admin:ise331:registerNode: — 預設自簽名伺服器證書是SAML證書：假

2025-01-31 16:01:25,306 INFO [admin-http-pool5][[]] cisco.cpm.provisioning.cert.CertProvisioningFactory -::admin:ise331:registerNode:- CertChangeHandler.handle():在本地證書和信任證書的插入事件上建立EAP證書鏈

ise330-ise-psc.log

2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 儲存的LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241548535177602714336375,issuer=<null>,notBefore=Thu Jan 30 13:32:34 IST 2025,notAfter=Sat Jan 30 13:32:34 IST 2027,subject=CN=ise331.tac.local，issuedTo=ise3 31.tac.local，certificateFilename=<null>,digestHash=<null>],id=f0463881-4c64-4ff5-96a2-4f0089f50459,name=ise331_tac_local#382a40d27abf53ac42387c77#PID$_ISE-VM-K9$_VID$_V01$_SN7LEAGKMIHMname name、friendly =預設自簽名伺服器證書， x509Certificate=null， iseRoles=[EAP， Admin， Portal， DTLS], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01、SN:S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-2, -92, -78, 78, 73, -87, 65, 60, -71, 0, 7, -127, -104, -124, 56, -83], description=null]

2025-01-31 16:01:25,830 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 正在準備儲存LocalCertificate:LocalCertificate [basicCertificateFields=X509BasicCertificateFields[version=0,serialNumber=17382241611749295087684098633,issuer=<null>,notBefore=Thu Jan 30 13:32:41 IST 2025,notAfter=Tue Jan 29 13:32:41 IST 2030,subject=CN=SAML_ise331.tac.local，issuedTo=SAML local，issuedBy=SAML_ise331.tac.local，certificateFilename=<null>,digestHash=<null>],id=26fd28f0-6346-4fd5-8699-312dfdf97a8e，name=SAML_ise331_tac_local#382a40d5e804fc9a4ba71a49#PID$_ISE-VM-k9 $_VID$_V01$_SN$_S7LEAGKMIHM， friendlyName=預設自簽名saml伺服器證書 — CN=SAML_ise331.tac.local， x509Certificate=null， iseRoles=[NO_SSOCert], hostConfigId=7ec82060-dee0-11ef-898d-0050568b232e， hostUDI=PID:ISE-VM-K9,VID:V01、SN:S7LEAGKMIHM， keySize=0, fipsCompliant=false， privateKeyGuid=[-18, 47, -17, -88, 79, -30, 69, -12, -73, 120, -111, -36, 40, 27, 43, 68], description=null]主機名：ise331主機配置Id:5ff70820-dfbe-11ef-bb78-12467b70bb3d

ise330-replication.log

2025-01-31 16:01:34,051 DEBUG [admin-http-pool5][[]] cisco.cpm.deployment.replication.PublisherImpl -::admin:ise331:registerNode: — 新增到發佈隊列ID:8afb25b0-dfbe-11ef-bb78-12467b70bb3d， seqNo:0，資料：3058 位元組

ise330-replication.log

2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟蹤註冊並同步正在進入主機的addNodeToDistributionSetup:ise331.tac.local

2025-01-31 16:02:14,488 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 輸入addNodeToDistributionSetupUsingJgroups

2025-01-31 16:02:14,501 INFO [admin-http-pool5][[]] api.services.persistance.dao.ReplicationStatusDAOImpl -::admin:ise331:registerNode: — 主機名：ise331,DB 'SEC_REPLICATIONSTATUS' =正在進行，節點角色：SECONDARY， ReplicationStatus對象狀態：SYNC_INPROGRESS

2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 退出addNodeToDistributionSetupUsingJgroups

2025-01-31 16:02:14,502 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 正在跟蹤註冊並同步完成addNodeToDistributionSetup for host:ise331.tac.local

2025-01-31 16:02:14,508 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 輸入offerSyncRequestToQueue

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] class com.cisco.epm.fullsync.FullSyncInfoHelper -::admin:ise331:registerNode: — 已建立FullSyncInfo[ a31cab00-dfbe-11ef-bb78-12467b70bb3d ]

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync同步請求是hostFQDN[ise331.tac.local] exportFilePath[null] syncRequestIdentifier[null] syncRequestTime[null] syncStatus[SYNC_INSYNCInSYNC] TRANSIENTSyncStatus[NULL] SYNCRequestType[REGISTER]

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.RegistrationAndSyncHelper -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 退出offerSyncRequestToQueue

步驟 7:在群集中註冊節點

ise330-ise-psc.log

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] api.services.server.distribution.DistributionImpl -::admin:ise331:registerNode: — 跟蹤RegistrationAndSync — 節點ise331的新註冊碼已完成

2025-01-31 16:02:14,524 INFO [admin-http-pool5][[]] cpm.admin.infra.action.DeploymentEditAction -::admin:ise331:registerNode: — 節點ise331已成功向個人管理、監控、策略服務註冊

步驟 8:防火牆規則

ise330-ise-psc.log

2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.174]

2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:-syncUpfwList:允許對ips進行DB訪問：[10.127.197.175]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:不允許對ips進行DB訪問：[]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 為jGroup應用防火牆規則

2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 適用於jGroup的應用的防火牆規則。

2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的防火牆規則。

2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 為節點組應用防火牆規則。

2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已應用節點組的防火牆規則。

2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的已應用防火牆規則。

2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 正在對節點組應用防火牆規則。

2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 節點組的已應用防火牆規則。

ise331-ise-psc.lohg

2025-01-31 16:00:39,945 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.174]

2025-01-31 16:00:43,526 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:允許ips訪問DB:[10.127.197.175]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils。FwUtil-::admin:ise331:registerNode:- syncUpfwList:不允許對ips進行DB訪問：[]

2025-01-31 16:00:46,617 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 為jGroup應用防火牆規則

2025-01-31 16:00:53,678 INFO [admin-http-pool5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-::admin:ise331:registerNode: — 適用於jGroup的應用的防火牆規則。

2025-01-31 16:14:32,420 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

2025-01-31 16:14:33,605 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

2025-01-31 16:14:34,785 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

2025-01-31 16:14:36,173 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的防火牆規則。

2025-01-31 16:14:36,184 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 為節點組應用防火牆規則。

2025-01-31 16:14:38,964 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 已應用節點組的防火牆規則。

2025-01-31 16:29:33,320 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-:::: — 部署主機IP:[10.127.197.174, 10.127.197.175]iptable主機：[10.127.197.175、10.127.197.174]

2025-01-31 16:29:35,505 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :允許對ips進行DB訪問：[]

2025-01-31 16:29:37,792 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils。FwUtil-::::- syncUpfwList :不允許對ips進行DB訪問：[]

2025-01-31 16:29:37,793 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 為jGroup應用防火牆規則

2025-01-31 16:29:40,551 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.JGroupsFWUtil-:::: — 適用於jGroup的已應用防火牆規則。

2025-01-31 16:29:40,558 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 正在對節點組應用防火牆規則。

2025-01-31 16:29:45,254 INFO [DefaultQuartzScheduler_Worker-5][[]] cisco.cpm.infrastructure.utils.NodeGroupFWUtil-:::: — 節點組的已應用防火牆規則。

步驟 9:Datadump匯出直到當前系統更改編號(SCN)並將檔案傳輸到ise331

ise330-ade.log

2025-01-31T16:02:41.682824+05:30 ise330根：info:[sync_export.sh]正在啟動同步識別符號b33db240-dfbe-11ef-bb78-12467b70bb3d的資料泵匯出……

2025-01-31T16:02:43.545110+05:30 ise330根：info:[sync_export.sh] SCN retrieved for sync identifier b33db240-dfbe-11ef-bb78-12467b70bb3d...現在開始匯出CSCN 6022419和主機ise330025-01-31T16:09:35.095186+05:30 ise330 root:info:[sync_export.sh]同步識別符號b33db240-dfbe-11ef-bb78-12467b70bb3d的匯出成功……

ise330-replication.log

2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Processing Sync請求

2025-01-31 16:02:41,563 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，null

2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -:::FullSync:-Found 1個同步請求。

2025-01-31 16:02:41,572 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-updateFullSyncStatus:a31cab00-dfbe-11ef-bb 78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d2025-01-31 16:02:41,584 INFO [Deployment-Sync-Manager-Thread-0][] class com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467 b70bb3d:FullSync:-Tracking RegistrationAndSync — 為識別符號啟動的匯出指令碼[b33db240-dfbe-11ef-bb78-12467b70bb3d]

2025-01-31 16:02:41,586 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:

2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.ExportImportExecutor -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 匯出指令碼已完成識別符號[b33db240-be 1ef-bb78-12467b70bb3d] returnVal + 0

2025-01-31 16:09:40,602 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-DB匯出已完成:returnValue:0

2025-01-31 16:09:40,603 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 已匯出資料庫轉儲:/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp大小（位元組）：131614567

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 建立文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 跟蹤註冊和同步 — 建立文件/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立的屬性檔案

2025-01-31 16:09:40,606 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立檔案/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 建立的檔案/opt/oracle/base/admin/cpm10/dpdump/primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 已建立證書

2025-01-31 16:09:40,688 INFO [Deployment-Sync-Manager-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78 12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:40,696 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 同步請求主機FQDN[ise331.tac.local] exportFile路徑[/opt/oracle/base/admin/cpm10/dpdump/cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp] sync請求識別符號[b33db240-dfbe-11ef-bb78-12467b70bb3d] syncRequestTime[Fri Jan 31 16:14:40 IST 2025] syncStatus[SYNC_INPROGRESS] transientSyncStatus[DBEXPORT_SUCCEEDED] syncRequestType[REGISTER]

2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 使用ise331b33db240-dfbe-11ef-bb將未來對象新增到對映78-12467b70bb3d， syncThreadsFutureMap:{ise331b33db240-dfbe-11ef-bb78-12467b70bb3d=java.util.concurrent.FutureTask@25d5b491}

2025-01-31 16:09:40,697 INFO [Deployment-Sync-Manager-Thread-0][[]] cisco.epm.fullsync.primary.PrimarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 執行器執行緒池超時設定為：300（分鐘）

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 已啟動主機：ise331的Sync執行緒部署 — SyncRequest-Thread-0執行，同步識別符號：b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -:::: — 覆蓋從2025年1月31日16:14:40至2025年1月31日16:09:40的同步開始時間

傳輸同步檔案

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -::::: — 正在傳輸同步文件……

2025-01-31 16:09:40,697 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp]，大小（位元組）：[131614567]

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks]，大小（位元組）：[25683]

2025-01-31 16:09:40,705 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties]，大小（位元組）：[263]

2025-01-31 16:09:40,706 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::- Tracking RegistrationAndSync — 檔名：[ repo_random.key]，大小（以位元組為單位）：[24]

2025-01-31 16:09:41,920 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 建立http連線管理器

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -::::: — 在http客戶端上設定憑據

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟蹤RegistrationAndSync — 開始將檔案傳輸到輔助節點ise331.tac.local

2025-01-31 16:09:42,002 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 跟蹤RegistrationAndSync — 輔助url ishttps://ise331.tac.local/deployment-rpc/uploadSyncFiles

2025-01-31 16:09:52,567 WARN [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 已成功將檔案傳輸到輔助節點ise331.tac.local

2025-01-31 16:09:52,568 WARN [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.HttpClientHelper -:::: — 上載完成，響應=

2025-01-31 16:09:52,568 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.FullSyncInfoHelper -:::- updateFullSyncStatus:a31cab00-dfbe-11ef-bb78-12467b70bb3d，b33db240-dfbe-11ef-bb78-12467b 70bb3d

2025-01-31 16:09:52,570 INFO [Deployment-SyncRequest-Thread-0][[]]類com.cisco.epm.fullsync.AbstractSyncRequest -::::-Sync已傳輸文件。現在正在輔助節點上啟動同步進程……

步驟 10:從ise330接收檔案

ise331-replication.log

2025-01-31 16:09:45,814資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 正在啟動receiveSyncFiles PAP:

2025-01-31 16:09:45,819資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync - Inside downloadSyncFilesAndVerify :請求org.apache.catalina.connector.RequestFacade@524def8e響應：org.apache.catalina.connector.ResponseFacade@51b18399

2025-01-31 16:09:45,821資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 同步的最大上載檔案計數設定為：6

2025-01-31 16:09:48,164資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 下載的專案數：6

2025-01-31 16:09:48,190資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,228警告[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269]

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp，檔名= null，內容型別= null，檔案大小= 131614567

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmp

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks，檔名= null，內容型別= null，檔案大小= 25683

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：primaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties，檔名= null，內容型別= null，檔案大小= 263

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：repo_random.key

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 欄位名稱= repo_random.key，檔名= null，內容型別= null，檔案大小= 24

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 正在儲存檔案：repo_random.key

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 儲存的檔案：repo_random.key

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：checkSum

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 檔案項名稱：syncRequestIdentifier

2025-01-31 16:09:49,229資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Tracking RegistrationAndSync — 即將驗證AndPrepareForSync

2025-01-31 16:09:49,243資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::-檔案下載)cpmsync_b33db240-dfbe-11ef-bb78-12467b70bb3d.dmpconfig_b33db240-dfbe-11ef-bb78-12467b70bb3d.propertiesprimaryCert_b33db240-dfbe-11ef-bb78-12467b70bb3d.jks

2025-01-31 16:09:50,294資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncHelper -::::- secondaryCheckSum [9d2a72222b701adc69f8f70a85e83eca3bbeead3fe025fbac94e9d77fc8fb269] primaryCheckSum [9d2a72222b701adc669f8a85e 83eca3bbeead3fe025fbac94e9d77fc8fb269]

2025-01-31 16:09:52,544資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 跟蹤RegistrationAndSync — 已完成receiveSyncFilesTracking RegistrationAndSync -

2025-01-31 16:09:52,901資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Tracking RegistrationAndSync — 即將啟動Sync

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 從PAP接收的syncRequestIdentifier:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 從PAP接收的secondaryHostName:ise331.tac.local

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已從PAP接收primUserDbPwd

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 從PAP接收的dataDirectDbPwd

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::- Received nodeExporterPwd from PAP

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::: — 已從PAP接收piProfilerMetricPwd

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::: — 已從PAP接收primKekKey

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received papAdminPwd from PAP

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -:::-Received syncRequestType from PAP:報名

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-即將呼叫startImportSyncPollerScript

2025-01-31 16:09:52,902資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::::: — 呼叫同步輪詢器以等待同步完成ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d [PrimaryDBPSWD] REGISTER

2025-01-31 16:09:53,082資訊[admin-http-pool14][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::: — 正在返回同步輪詢器以等待同步完成

2025-01-31 16:09:53,083資訊[admin-http-pool14][[]] cpm.infrastructure.deployment.rpc.DeploymentRegistrationListener -::::-呼叫startImportSyncPollerScript

2025-01-31 16:10:16,217調試[main][[]] cisco.cpm.cluster.impl.BaseServiceInvoker -:::: — 正在註冊NodeInfoService

2025-01-31 16:11:29,181資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在傳送臨時同步狀態：DBIMPORT_INITIATED、節點同步狀態：SYNC_INPROGRESS到PAP。同步請求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.FileUtil -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在從讀取主節點資訊：/opt/oracle/base/admin/cpm10/dpdump/config_b33db240-dfbe-11ef-bb78-12467b70bb3d.properties

2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:- syncRequestIdentifier..local值：b33db240-dfbe-11ef-bb78-12467b70bb3d & syncRequestIdentifier in config file :b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 對於syncRequestIdentifier b33db240-dfbe-11ef-bb78-12467b70bb3d，正在將同步狀態傳送到[https://ise330.tac.local/deployment-rpc/updateSyncStatus]

2025-01-31 16:11:29,199資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 正在建立http連線管理器

2025-01-31 16:11:29,212調試[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-syncRequestIdentifier —> b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:12:27,369資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 在http客戶端上設定憑據

2025-01-31 16:12:27,744資訊[main][[]]類com.cisco.epm.fullsync.HttpClientHelper -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已成功更新同步狀態的主節點

步驟 11:ISE331上的DB匯入

ise331-replication.log

2025-01-31 16:12:27,746資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 正在啟動DB導入。

2025-01-31 16:12:27,746資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要運行的指令碼[ /usr/bin/sudo /opt/CSCOcpm/bin/sync_import.sh ise331.tac.local b33db240-dfbe-11ef-bb78-12467b70bb3d REGISTER ]

2025-01-31 16:16:20,351資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d::-DB匯入已完成。

2025-01-31 16:16:20,351資訊[main][[]]類com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 要運行的指令碼[ /usr/bin/sudo /opt/CSCOcpm/bin/setdbpw.sh primaryUserDbPWD ]

2025-01-31 16:18:32,753資訊[main][[]] class com.cisco.epm.fullsync.DbImportDaemon -::b33db240-dfbe-11ef-bb78-12467b70bb3d:: — 已重置資料庫密碼。

2025-01-31 16:18:32,754資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d: — 正在傳送臨時同步狀態：SECONDARY_SYNC_COMPLETED，節點同步狀態：SYNC_COMPLETED到PAP

ise331-ade.log

2025-01-31T16:12:30.546657+05:30 ise331根：info:[sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：正在啟動datadump匯入……

2025-01-31T16:16:19.734878+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d：資料庫同步匯入已成功完成

匯入完成後刪除資料庫

2025-01-31T16:16:19.895863+05:30 ise331根：info:[application:operation:sync_import.sh]同步完成後從資料庫中刪除調配資源……

2025-01-31T16:16:20.341542+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:已釋放DATABASE_SYNCIMPORT鎖

2025-01-31T16:16:20.345768+05:30 ise331根：info:[application:operation:sync_import.sh] b33db240-dfbe-11ef-bb78-12467b70bb3d:Datadump匯入過程已完成

2025-01-31T16:16:20.738342+05:30 ise331根：info:[application:operation:setdbpw.sh]重置內部資料庫使用者密碼以與ISE主使用者密碼匹配

步驟 12:正在將同步完成狀態更新為ise330

ise331-replication.log

2025-01-31 16:18:32,754資訊[main][[]] cisco.epm.fullsync.secondary.SecondarySyncManager -::b33db240-dfbe-11ef-bb78-12467b70bb3d: — 正在傳送瞬態同步狀態：SECONDARY_SYNC_COMPLETED，節點同步狀態：SYNC_COMPLETED到PAP。同步請求ID:b33db240-dfbe-11ef-bb78-12467b70bb3d

2025-01-31 16:29:59,419資訊[Psc-SyncStatusUpdaterJob-Thread][[]] Replication-Deployment.PrimaryNodeProxy -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 在完全同步到Primary、objId後傳送ise331的sync statusSYNC_COMPLETED:a31cab00-dfbe-11ef-bb78-12467b70bb3d， syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d， hostConfigMdDate:2025-01-31 16:16:19.880098

ise330-replication.log

2025-01-31 16:29:59,429資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync:-Received status:SYNC COMPLETED,objid:a31cab00-be-11ef-bb78-12467b7 0bb3d，syncReqId:b33db240-dfbe-11ef-bb78-12467b70bb3d，hostconfigModDt:2025-01-31 16:16:19.880098 from ise331

2025-01-31 16:29:59,480資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 此更新適用於資料庫中找到的最新完整同步資訊。

2025-01-31 16:29:59,480資訊[OOB-8,ISERepCluster-F3ixn，ise330-46234][[]] cisco.cpm.deployment.replication.MasterNodeHandlerImpl -::b33db240-dfbe-11ef-bb78-12467b70bb3d:FullSync: — 將ise331的狀態從進行中更新到SYNC COMPLETED

與節點同步問題相關的警報

- 慢速複製資訊

- 複製速度慢警告

- 慢速複製錯誤

- 複製失敗

- 複製已停止

- 節點不同步

已知瑕疵

錯誤ID

說明

CSCwj67089

通過本地磁碟管理將大型檔案匯入輔助節點時，Cisco ISE應用伺服器崩潰。

CSCwi78722

Azure VM:無法將節點註冊到部署。

CSCwh70275

在註銷中註冊剩餘證書的節點時，將刪除當前正在使用的證書。

CSCwh08408

由於找不到節點匯出器密碼，思科ISE版本3.3無法在部署升級後註冊新節點。