將ISE 3.3與DNAC整合

下載選項

  • PDF     (1.3 MB)
    在多種裝置上使用 Adobe Reader 檢視
已更新: 2025 年 6 月 27 日
文件 ID:223162

無偏見用語

本產品的文件集力求使用無偏見用語。針對本文件集的目的，無偏見係定義為未根據年齡、身心障礙、性別、種族身分、民族身分、性別傾向、社會經濟地位及交織性表示歧視的用語。由於本產品軟體使用者介面中硬式編碼的語言、根據 RFP 文件使用的語言，或引用第三方產品的語言，因此本文件中可能會出現例外狀況。深入瞭解思科如何使用包容性用語。

關於此翻譯

思科已使用電腦和人工技術翻譯本文件，讓全世界的使用者能夠以自己的語言理解支援內容。請注意，即使是最佳機器翻譯，也不如專業譯者翻譯的內容準確。Cisco Systems, Inc. 對這些翻譯的準確度概不負責，並建議一律查看原始英文文件（提供連結）。

    簡介

    本文檔介紹使用pxGrid連線將ISE 3.3與思科DNA中心(DNAC)整合的過程。

    必要條件

    • ERS讀寫訪問。
    • ISE和Catalyst Center之間沒有代理伺服器。
    • 需要在ISE上啟用PxGrid。
    • 整合需要FQDN，而不僅僅是IP地址（證書）。
    • 如果使用企業頒發的證書，則需要Catalyst Center群集的VIP +實際IP。
    • ISE上的CLI憑證不再用於整合，僅支援基於API的訪問。
    • 需要IP可達性。

    需求

    思科建議您瞭解以下主題：

    • 身分識別服務引擎3.3
    • 思科DNA

    採用元件

    本文中的資訊係根據以下軟體和硬體版本：

    • 身分識別服務引擎版本3.3

    • 思科DNA

    本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。

    背景資訊

    SD-Access解決方案通過組合思科Catalyst中心、思科®身份服務引擎(ISE)以及具有交換矩陣功能的有線和無線裝置平台提供。

    通過Cisco Catalyst Center軟體實現Cisco Catalyst Center的自動化、分析、可視性和管理。SD-Access是此軟體的一部分，用於設計、調配、應用策略，並幫助建立有保證的智慧有線和無線園區網路。

    ISE是SD-Access實施網路訪問控制策略的有機組成部分。ISE執行策略實施，實現使用者和裝置到可擴展組的動態對映，並簡化端到端安全策略實施。在ISE中，使用者和裝置以簡單靈活的介面顯示。ISE通過思科平台交換網格(pxGrid)和代表狀態傳輸(REST)API與Cisco Catalyst中心整合，用於終端事件通知和ISE上策略配置的自動化。

    瞭解思科身份服務引擎(ISE)是思科DNA中心的重要組成部分，這一點至關重要。它提供核心的基於意圖的服務，例如：

    1. AAA（RADIUS和TACACS+）    

    2.網路可視性

    3.使用者和裝置自註冊    

    4.安全政策        

    5.宏觀和微觀分割

    要使用這些服務，必須將Cisco DNA Center與ISE整合以建立可信的關係。本指南提供完成整合過程的逐步說明。

    設定

    ISE 組態

    步驟 1:必須在ISE上啟用Pxgrid。

    必須在System > Deployment > Edit Node > PxGrid下啟用PxGrid服務，如下圖所示：

    Pxgrid must be Enabled on ISE

    note-icon

    附註：在分散式環境中，您可以在兩個ISE節點上運行pxgrid角色。建議在非管理節點上運行pxgrid persona。

    步驟 2:啟用REST風格服務(ERS)讀取/寫入：

    要在ISE上啟用表示狀態傳輸(REST)和應用程式設計介面(API)服務，必須在Administration > System > Settings > ERS Settings > Enable ERS for Read/Write下啟用ERS讀/寫，如下圖所示：

    Enable RESTful Services (ERS) Read/Write

    note-icon

    附註：在分散式ISE環境中，確保選擇Enable ERS for Read（啟用ERS讀取），否則，ERS會話可以在主管理上啟動，但在輔助上無法啟動。

    步驟 3:確保兩個設定均已啟用，如管理> pxGrid服務>設定下所示。

    啟用自動批准基於證書的新帳戶。

    啟用Allow password based account creation。

    這允許自動批准pxGrid客戶端。

    Both Settings are Enabled

    Cisco DNA組態

    步驟 1:登入思科DNAGUI。

    步驟 2:導航到System Settings > Settings > Authentication and Policy Servers。

    Navigate to System Settings, Settings, Authentication and Policy Servers

    步驟 3:按一下「新增」。從下拉選單中選擇ISE:

    Click Add

    步驟 4:新增所有詳細信息，如下所示：

    伺服器IP地址：ISE主管理節點的IP地址。

    共用金鑰：這是交換機作為網路裝置被Cisco DNA推送到ISE時的Radius共用金鑰。

    使用者名稱/密碼：ISE管理員憑據。

    FQDN：ISE主管理節點FQDN。

    訂閱者名稱：這是Cisco DNA向ISE Pxgrid發起訂閱請求時在ISE上的Pxgrid服務下顯示的名稱。

    Add in the Server IP Address and FQDN

    Initiate Connection

    Integration in Progress

    驗證

    • 導航至系統設定>設定>身份驗證和策略伺服器。 
    • ISE整合狀態將顯示為活動。

    Verify ISE Integration Status is Active

    導覽至Settings > System 360:

    ISE伺服器在External Connected Systems下顯示為Available，如下所示：

    ISE Servers Show as Available

    疑難排解

    在ISE中的調試級別設定以下元件：

    • Pxgrid
    • 基礎設施
    • Ers
    note-icon

    附註：開始思科DNA-ISE整合之前，請使用以下命令跟蹤服務日誌：

    可以使用以下命令在Cisco DNA CLI上即時檢查日誌： 

    • maglev$ magctl service logs -rf ise-bridge
    • maglev$ magctl service logs -rf network-design -c network-design-service

    A部分：Cisco DNA上的日誌消息流，用於成功整合

    步驟 1:正在獲取ISE憑據。

    2025/06/07 17:21:41 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    025-06-07 17:21:41,905 |信息 | messageListenerContainer-6 |  | c.c.a.c.c.impl.AARasClientImpl | AAARasClientImpl — 建立api。RBAC uuid - null | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager | 步驟：正在獲取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.trust.CiscoISEManager |為ISE信任建立呼叫開始服務 | correlationId=1978f306-0857-467d-b974-6444a163f742

    2025-06-07 17:21:41,917 |信息 | messageListenerContainer-6 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |構建API路徑，為使用ip的ISE的CREATE請求呼叫GO服務：10.127.196.71和主機名：l | correlationId=1978f306-0857-467d-b974-6444a163f742

    步驟 2:證書錯誤，等待接受證書是否為自簽名且不受信任。

    06/07 17:21:42 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:21:42 [DEBUG] GET https://10.127.196.71/admin/API/PKI/TrustCertificates

    2025/06/07 17:21:44 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    2025-06-07 17:21:44,730 |信息 | qtp480903748-238          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE整合狀態步驟 | correlationId=831c9c36-d534-415d-86d6-

    2025-06-07 17:21:44,964 |錯誤 | messageListenerContainer-6 |  | c.c.a.c.s.h.CreateAaaMessageHandler | 證書正在等待使用者接受{} | correlationId=1978f306-0857-467d-b974-6444a163f742

    com.cisco.apicem.commonsettings.service.exception.CertificateWaitingUserAcceptanceException:{"i18n":{"code":"NCND80015"}}

            在com.cisco.apicem.commonsettings.service.util.GoTrustEstablishmentUtil.callGoServiceForTrustProcessing(GoTrustEstablishmentUtil.java:139)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrustWithPAN(CiscoISEManager.java:215)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.trust.CiscoISEManager.establishTrust(CiscoISEManager.java:184)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:554)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRBACInvocation(CreateAaaMessageHandler.java:536)~[classes/:na]

            在com.cisco.apicem.commonsettings.service.handler.CreateAaaMessageHandler.handleRequest(CreateAaaMessageHandler.java:143)~[classes/:na]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler_aroundBody0(GrapevineMessageListener.java:485)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener$AjcClosure1.run(GrapevineMessageListener.java:1)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:167)~[aspectjrt-1.9.6.jar:na]

            在com.cisco.enc.i18n.localization.aop.EnableI18nOnRequestHandler.getEmptyResponse(EnableI18nOnRequestHandler.java:26)~[i18n-7.1.722.60901.jar:7.1.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.invokeHandler(GrapevineMessageListener.java:452)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            在com.cisco.grapevine.amqp.impl.GrapevineMessageListener.onMessage(GrapevineMessageListener.java:273)~[message-queue-sdk-7.0.722.60901.jar:7.0.722.60901]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.doInvokeListener(AbstractMessageListenerContainer.java:856)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.invokeListener(AbstractMessageListenerContainer.java:779)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$001(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$1.invokeListener(SimpleMessageListenerContainer.java:208)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.invokeListener(SimpleMessageListenerContainer.java:1381)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.AbstractMessageListenerContainer.executeListener(AbstractMessageListenerContainer.java:760)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.doReceiveAndExecute(SimpleMessageListenerContainer.java:1324)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.receiveAndExecute(SimpleMessageListenerContainer.java:1294)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer.access$1800(SimpleMessageListenerContainer.java:105)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            at org.springframework.amqp.rabbit.listener.SimpleMessageListenerContainer$AsyncMessageProcessingConsumer.run(SimpleMessageListenerContainer.java:1550)~[spring-rabbit-1.7.15.RELEASE.jar:na]

            在java.base/java.lang.Thread.run(Thread.java:834)~[na:na]

    2025-06-07 17:21:46,284 |信息 | qtp480903748-916          |  | c.c.a.c.s.util.CommonSettingsUtil |檢索MultiCisco DNAConfigurationTable = MultiCisco DNAConfigurationTable[clusterUuid=878771ce-8f93-44a5-82c9-3561e14c2d77,createTime=2024-08-23 14:18:11.381,inMultiCisco DNAMode=false，lastUpdated time=2024-08-23 14:18:11.381,multiCisco DNAFeatureEnabled=false，instanceUuid=7f606daa-ca05-472b-b45c-fe8dfead1717,instanceId=7007,authEntityId=7007,authEntityClass=1586401731,instanceTenantClass id=66c88fc4104bfb741d052de9,_orderedListOEIindex=<Integer>,_creationOrderIndex=<Integer>,_isBeingChanged=<Boolean>,deployPending=<DeployPendingEnum>,instanceCreatedOn=<Timestamp>,instanceUpdatedOn=<Timestamp>,instanceVersion=1] | correlationId=5888c4bb-f407-4771-97e6-e5c9a9e08746

    步驟 3:已呼叫證書接受。

    17:22:05,574 |信息 | qtp480903748-909          |  | c.c.a.c.s.controller.AAAC控制器 | Incoming Cert Accepted by user?:true | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,581 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.h.CreateAaaMessageHandler | 進入使用者證書確認階段 | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager | 步驟：正在獲取iseUsername、isePassword、iseHostIp、iseHostName、iseSshKey、apicEmIp、apicEmFqdn | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager |------------------------------------------------------------------------------------------------ | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.trust.CiscoISEManager | ISE的CALL GO服務TRUST CERT_ACCEPT | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    2025-06-07 17:22:05,605 |信息 | messageListenerContainer-9 |  | c.c.a.c.s.u.GoTrustEstablishmentUtil |構建API路徑，以便使用ip為ISE的CERT_ACCEPT請求呼叫GO服務：10.127.196.71和主機名： | correlationId=8b73524a-a3b1-4ebd-9d3a-b70830d64c83

    步驟 4:建立信任。

    2025-06-07 17:22:06,365 |信息 | qtp480903748-246          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =INITIATE_CONNECTION_TO_ISE的ISE整合狀態步驟 | correlationId=c1bfde32-4cec-4c9f-afab-06291f1bc437

    2025-06-07 17:22:06,375 |信息 | qtp480903748-909          |  | c.c.a.c.s.c.IseIntegrationStatusController |更新StepName =ESTABLISHING_TRUST_WITH_ISE的ISE整合狀態步驟 | correlationId=fbba646c-bdae-4554-8c70-0a5836f4c860

    步驟 5:正在檢查ISE ERS配置。

    2025/06/07 17:22:06 [DEBUG] GET https://10.127.196.71/admin/API/NetworkAccessConfig/ERS

    {"asctime":"2025-06-07T17:22:07.529Z","correlationId":"","level":"info","msg":"ISE上當前ERS配置{XMLName:{Space:Local:ersConfig} ID:1 ISCSRF:false IsPAP:true IsPSNS:true}","packagename":"ISE連線管理器"}

    步驟 6:正在驗證ISE版本。

    2025/06/07 17:22:07 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:07 [DEBUG] GET https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    {"asctime":"2025-06-07T17:22:09.065Z","correlationId":","level":"info","msg":" ISE版本為{Version:3.3 Patch:0 PatchList:0}","packagename":"ISE連線管理器"}

    步驟 7:正在獲取遙測資訊。

    2025/06/07 17:22:09 [DEBUG] GET https://10.127.196.71:9060/ers/config/telemetryinfo

    {"asctime":"2025-06-07T17:22:10.161Z","correlationId":","level":"info","msg":"遙測標識30d43265-1577-4e02-a10b-6b549099f544","packagename":"實用程式"}

    {"asctime":"2025-06-07T17:22:10.161Z","correlationId":"","level":"info","msg":"在ISE節點上檢查並啟用openAPI","packagename":"ISE連線管理器"}

    步驟 8:正在從ISE獲取API狀態。

    2025/06/07 17:22:10 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:10 [DEBUG] GET https://10.127.196.71/admin/API/apiService/get

    {"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"OpenAPI已啟用， {true}","packagename":"ISE連線管理器"}

    步驟 9:已完成與ISE的信任建立。

    {"asctime":"2025-06-07T17:22:11.291Z","correlationId":"","level":"info","msg":"Updating overall status to trusted","packagename":"ISE連線管理器"}

    2025/06/07 17:22:11 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:11.304Z","correlationId":"","level":"info","msg":"正在將節點狀態更新傳送到NDS。負載{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"acc84e0a-cfdb-48a4-2f56eafe5490\",\"描述\":\",\"故障原因\":\"\",\"fqdn\":\"l\",\"ip地址\":\"10.127.196.71\",\"操作型別\":\"更新\",\"角色\":\"主\",\"狀態\":\"活動\",\"使用者名稱稱\":\"pxgrid_client_1749316904\",\"信任狀態\":\"信任\"}],\"ipName address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"節點更新狀態到NDS，響應代碼200 OK"," packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"Sending certificates to NDS","packagename":"ISE連線管理器"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在新增{17487437175958362366089997042 CREATE}","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.319Z","correlationId":"","level":"info","msg":"正在將節點狀態更新傳送到NDS。負載[{\"serialNumber\":\"17487437175958362366089997042\",\"issuer\":\"CN=l\",\"operationType\":\"CREATE\"}]","packagename":"ndsutil"}

    2025/06/07 17:22:11 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/iseCerts

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":"","level":"info","msg":"節點更新狀態到NDS，響應代碼200 OK","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":","level":"info","msg":"更新ISE步驟ESTABLISHING_TRUST_WITH_ISE with status COMPLETE"," packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.329Z","correlationId":","level":"info","msg":"正在向NDS傳送請求{\"StepName\":\"ESTABLISHING_TRUST_WITH_ISE\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    步驟 10:發現ISE部署中的節點。

    {"asctime":"2025-06-07T17:22:11.339Z","correlationId":","level":"info","msg":"更新ISE步驟DISCOVERING_NODES的狀態IN_PROGRESS","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:11.339Z","correlationId":","level":"info","msg":"正在向NDS傳送請求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

    2025/06/07 17:22:11 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    {"asctime":"2025-06-07T17:22:11.348Z","correlationId":","level":"info","msg":"Posted ISE Integration Step to NDS， http response code=200","packagename":"ndsutil"}

    2025/06/07 17:22:11 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:11 [DEBUG] GET https://10.127.196.71/admin/API/Infra/Node/SimpleList

    {"asctime":"2025-06-07T17:22:12.512Z","correlationId":","level":"info","msg":"66c88fc4104bfb741d052de9:b745dd4f-2a222-47d8-a216-6a5a85f3ea69接收了4個節點","packagename":"ISE連線管理器"}

    {"asctime":"2025-06-07T17:22:12.512Z","correlationId":","level":"info","msg":"正在新增主PAN節點本地化33pan/10.127.196.71，角色PRIMARY","packagename":"ISE連線管理器"}

    de localize33pan/10.127.196.71, role PRIMARY","packagename":"ISE連線管理器"}

    2025/06/07 17:22:12 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:12 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33localspan

    {"asctime":"2025-06-07T17:22:13.612Z","correlationId":","level":"info","msg":"正在新增輔助PAN節點i

    {"asctime":"2025-06-07T17:22:13.612Z","correlationId":"","level":"info","msg":"正在新增MnT主節點

    2025/06/07 17:22:13 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:13 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/ise33seclocal

    {"asctime":"2025-06-07T17:22:14.737Z","correlationId":"","level":"info","msg":"正在新增pxgrid節點

    2025/06/07 17:22:14 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:14 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/isepxgrid2025

    {"asctime":"2025-06-07T17:22:15.863Z","correlationId":"","level":"info","msg":"正在新增PSN節點isepxgrid2025.localad.com/10.127.196.74","packagename":"ISE連線管理器"}

    2025/06/07 17:22:15 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:15 [DEBUG] GET https://10.127.196.71:9060/ers/config/node/name/localise33ppan

    {"asctime":"2025-06-07T17:22:17.047Z","correlationId":"","level":"info","msg":"正在新增PSN節點l/10.127.196.71"," packagename":"ISE連線管理器"}

    步驟 11:節點發現已完成。

    2025/06/07 17:22:17 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:17.843Z","correlationId":"","level":"info","msg":"正在將節點狀態更新傳送到NDS。負載{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"49523ddb-e1d5-c53d-1e20-01f8509a3c28\",\"描述\":",\"故障原因\":\"\",\"fqdn\":\\",\"ip地址\":\"10.127.196.73\",\"操作型別\":\"建立\",\"角色\":\"輔助\",\"狀態\":\"活動\",\"使用者名稱稱\":\"pxgrid_client_1749316904\",\"信任狀態\":\"信任的\"}],\"ipA address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:17 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":"","level":"info","msg":"節點更新狀態到NDS，響應代碼200 OK","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":","level":"info","msg":"Updating ISE Step DISCOVERING_NODES with status COMPLETE"," packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:17.860Z","correlationId":","level":"info","msg":"正在向NDS傳送請求{\"StepName\":\"DISCOVERING_NODES\",\"StepStatus\":\"COMPLETE\"}"," packagename":"ndsutil"}

    步驟 12:獲取ISE本地證書。

    {"asctime":"2025-06-07T17:22:17.871Z","correlationId":"","level":"info","msg":"GetCertChainForISERole 、角色EAP和節點l","packagename":"證書管理器"}

    {"asctime":"2025-06-07T17:22:17.871Z","correlationId":","level":"info","msg":"從ISE 10.127.196.71", "packagename":"Certificate Manager"}

    2025/06/07 17:22:17 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:17 [DEBUG] GET https://10.127.196.71/admin/API/PKI/LocalCertificates

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"正在構建枝葉證書的證書鏈。Node=10.127.196.71;cname=","packagename":"證書管理器"}

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":","level":"info","msg":"證書是自簽名。Subject=CN和Issuer=CN，跳過證書鏈生成","packagename":"證書管理器"}

    {"asctime":"2025-06-07T17:22:19.264Z","correlationId":"","level":"info","msg":"Inserting into iseCerts","packagename":"DAL"}

    {"asctime":"2025-06-07T17:22:19.276Z","correlationId":"","level":"info","msg":"已成功插入iseCerts"," packagename":"DAL"}

    2025/06/07 17:22:19 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    步驟 13:Pxgrid連線檢查。

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":"","level":"info","msg":"PxGrid is enabled","packagename":"ISE連線管理器"}

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status IN_PROGRESS","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:19.336Z","correlationId":","level":"info","msg":"正在向NDS傳送請求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"IN_PROGRESS\"}","packagename":"ndsutil"}

    2025/06/07 17:22:19 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Posted ISE Integration Step to NDS， http response code=200","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"獲取和生成節點10.127.196.72的管理證書鏈"," packagename":"證書管理器"}

    {"asctime":"2025-06-07T17:22:19.349Z","correlationId":"","level":"info","msg":"Fetching server certificate for 10.127.196.72"," packagename":"Certificate Manager"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":","level":"info","msg":"fetted server cert chain for 10.127.196.72, chain length 4","packagename":"Certificate Manager"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":","level":"info","msg":"檢查對等體是否提供了完整的證書鏈，鏈長=4","packagename":"證書管理器"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":","level":"info","msg":"Node=10.127.196.72;cname=","packagename":"Certificate Manager"}

    {"asctime":"2025-06-07T17:22:20.907Z","correlationId":"","level":"info","msg":"正在插入ise-bridge certpool。Issuer=CN=Certificate Services Node CA - localize33ppan;Subject=CN=Certificate Services Endpoint Sub CA - ise33seclocal;  序列號=336164adf99b4663b51c7d8787b671e2","packagename":"Certificate Manager"}

    2025/06/07 17:22:20 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    {"asctime":"2025-06-07T17:22:20.920Z","correlationId":"","level":"info","msg":"正在將節點狀態更新傳送到NDS。負載{\"aaaServerId\":\"b745dd4f-2a22-47d8-a216-6a5a85f3ea69\",\"ciscoIseList\":[{\"ciscoIseId\":\"dad546ca-fe8f-28d9-a112-56ecade00239\",\"描述\":\"\",\"故障原因\":\"\",\"fqdn\":\"\",\"ip地址\":\"10.127.196.72\",\"操作型別\":\"建立\",\"角色\":\"PXGRID\",\"狀態\":\"非活動\",\"subscriberName\":\"pxgrid_client_1749316904\",\"trustState\":\"可信的\"}],\"ipName address\":\"10.127.196.71\",\"iseConnectionType\":\"TRUST\"}","packagename":"ndsutil"}

    2025/06/07 17:22:20 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo

    {"asctime":"2025-06-07T17:22:20.936Z","correlationId":"","level":"info","msg":"節點更新狀態到NDS，響應代碼200 OK","packagename":"ndsutil"}

    步驟 14:證書更新。

    {"asctime":"2025-06-07T17:22:22.585Z","correlationId":"","level":"info","msg":"Fetch endpoint certs from ISE， \u026{CertTemplateName:pxGrid_Certificate_Template Format:PKCS8_CHAIN密碼：CertificateRequest:{San:52:ad:88:67:42:58 Cn:admin_66c88fc4104bfb741d052de9}","packagename":"PxGridClient"}

    2025/06/07 17:22:22 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    2025/06/07 17:22:22 [調試] PUT https://10.127.196.71:9060/ers/config/endpointcert/certRequest

    {"asctime":"2025-06-07T17:22:24.071Z","correlationId":"","level":"info","msg":"Inserting into iseCerts"," packagename":"DAL"}

    {"asctime":"2025-06-07T17:22:24.072Z","correlationId":"","level":"info","msg":"已成功插入iseCerts"," packagename":"DAL"}

    步驟 15:Pxgrid客戶端啟用。

    {"asctime":"2025-06-07T17:22:24.074Z","correlationId":","level":"info","msg":"Successfully loaded privateKey from endpoint certs"," packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:24.074Z","correlationId":"","level":"info","msg":"客戶端證書鏈1 ","packagename":"PxGridClient"}中的證書條目數

    2025/06/07 17:22:24 [調試] POST https://10.127.196.72:8910/pxgrid/control/AccountActivate

    {"asctime":"2025-06-07T17:22:25.247Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccountActivate","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:25.247Z","correlationId":","level":"info","msg":"GOT ACCOUNT ACTIVATE RESPONSE:\u0026{AccountState:ENABLED Version:2.0}","packagename":"PxGridClient"}

    2025/06/07 17:22:25 [調試] POST https://10.127.196.72:8910/pxgrid/control/ServiceLookup

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/ServiceLookup","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":","level":"info","msg":"嘗試連線pubsub service \u026{Name:com.cisco.ise.pubsub NodeName:~ise-pubsub-ise33seclocal Properties:map[wsUrl:wss://:8910/pxgrid/ise/pubsub]} ","packagename":"pxGridClient"}

    {"asctime":"2025-06-07T17:22:26.311Z","correlationId":","level":"info","msg":"ISE Pubsub Web服務URL:wss://10.127.196.72:8910/pxgrid/ise/pubsub"," packagename":"PxGridClient"}

    2025/06/07 17:22:26 [調試] POST https://10.127.196.72:8910/pxgrid/control/AccessSecret

    {"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"Got Response 200, for URL https://10.127.196.72:8910/pxgrid/control/AccessSecret","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:27.461Z","correlationId":"","level":"info","msg":"正在嘗試撥號到wsurl wss://10.127.196.72:8910/pxgrid/ise/pubsub","packagename":"ws-endpoint"}

    {"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Connected to wss://10.127.196.72:8910/pxgrid/ise/pubsub"," packagename":"ws-endpoint"}

    2025/06/07 17:22:28 [調試] POST https://credentialmanager.maglev-system.svc.cluster.local:443/api/v1/credentialmanager/decryption

    {"asctime":"2025-06-07T17:22:28.479Z","correlationId":"","level":"info","msg":"Setting as active pxgrid node","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:28.533Z","correlationId":"","level":"info","msg":"Updating ISE Step PXGRID_CONNECTION with status COMPLETE","packagename":"ndsutil"}

    {"asctime":"2025-06-07T17:22:28.533Z","correlationId":","level":"info","msg":"正在向NDS傳送請求{\"StepName\":\"PXGRID_CONNECTION\",\"StepStatus\":\"COMPLETE\"}","packagename":"ndsutil"}

    2025/06/07 17:22:28 [調試] PUT http://network-design-service.fusion.svc.cluster.local:32765/iseIntegrationStatus/Step

    2025/06/07 17:22:28 [DEBUG] GET http://network-design-service.fusion.svc.cluster.local:32765/aaaStatusInfo/b745dd4f-2a22-47d8-a216-6a5a85f3ea69

    第16步：Trustsec SGT下載。

    {"asctime":"2025-06-07T17:22:34.370Z","correlationId":","level":"info","msg":"BULK DOWNLOADING FOR SERVICE com.cisco.ise.config.trustsec TOPIC securityGroupTopic","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:34.371Z","correlationId":","level":"info","msg":"Bulkdownload URLs:[https://10.127.196.71:8910/pxgrid/ise/config/trustsec]","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:34.371Z","correlationId":"","level":"info","msg":"嘗試使用https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}批次下載 com.cisco.ise.config.trustsec

    2025/06/07 17:22:34 [調試] POST https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Got Response 200 ，對於URL https://10.127.196.71:8910/pxgrid/ise/config/trustsec/getSecurityGroups","packagename":"PxGridClient"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Reset Security Group Cache.","packagename":"cache"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":"","level":"info","msg":"Updating Security Group Cache","packagename":"cache"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":","level":"info","msg":"SG bulkdownload data， ACA尚未註冊，請不要推送到RMQ","packagename":"訂閱者"}

    {"asctime":"2025-06-07T17:22:35.424Z","correlationId":","level":"info","msg":"完成對所有主題的訂閱和完成的批次下載","packagename":"ISE連線管理器"}

    B部分：ISE上的日誌消息流（ISE PSC日誌）

    步驟 1:正在獲取節點詳細資訊。

    2025-06-07 22:45:22,788 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::: — 基本身份驗證成功。使用者：admin

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/node

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/node

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:45:22,788 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —>getLocalPort=9060

    2:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -::::- DEBUG INFO — RESULT com.cisco.cpm.ers.app.proxy.HostConfigProxy@2ff9a8ef

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -::::- DEBUG INFO — 結果com.cisco.cpm.ers.app.proxy.HostConfigProxy@39c857df

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -::::- DEBUG INFO — 結果com.cisco.cpm.ers.app.proxy.HostConfigProxy@24e4889c

    2025-06-07 22:45:22,794 DEBUG [ers-http-pool15][[]] ers.app.impl.handlers.NodeCRUDHandler -::::- DEBUG INFO — 結果com.cisco.cpm.ers.app.proxy.HostConfigProxy@73eb7edf

    2025-06-07 22:45:22,802 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources for resource type 'node'已成功完成

    步驟 2:ISE上的版本檢查。

    2025-06-07 22:48:39,847 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::: — 基本身份驗證成功。使用者：admin

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -::::: — 身份驗證基於密碼，跳過基於證書的身份驗證

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>繼續執行ERS請求，當前時段計數為：49

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- #### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- #### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,848 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- #### PAPFilter.doFilter —> getPathInfo=/op/systemconfig/iseversion

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- #### PAPFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- #### PAPFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/op/systemconfig/iseversion

    2025-06-07 22:48:39,849 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getRemoteHost=10.62.113.211

    步驟 3:正在獲取遙測資訊。

    2025-06-07 22:48:41,371 INFO [ers-http-pool15][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::: — 基本身份驗證成功。使用者：admin

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.CertificateAuthenticator -::::: — 身份驗證基於密碼，跳過基於證書的身份驗證

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>繼續執行ERS請求，當前時段計數為：49

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -::::- ### PICFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- #### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -:::::- #### PICFilter.doFilter —> getRequestURL=https://10.127.196.71:9060/ers/config/telemetryinfo

    2025-06-07 22:48:41,371 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:48:41,372 DEBUG [ers-http-pool15][[]] cpm.ers.app.web.PAPFilter -::::- ### PAPFilter.doFilter —> getPathInfo=/telemetryinfo

    2025-06-07 22:48:41,374 INFO [ers-http-pool15][[]] ers.app.impl.handlers.TelemetryInfoCRUDHandler -:::: — 在GET ALL API中

    2025-06-07 22:48:41,377 INFO [ers-http-pool15][[]] cisco.cpm.ers.fw.CRUDService -::::- Get ALL resources for resource type 'telemetryinfo'已成功完成

    步驟 4:ISE使用基於REST的請求獲取整合中的資訊。

    2025-06-07 22:49:00,957 INFO [ers-http-pool18][[]] cpm.ers.app.web.BasicAndTokenAuthenticator -::::: — 基本身份驗證成功。使用者：admin

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getPathInfo=/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getMethod=GET

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getRemoteHost=10.62.113.211

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -::::- ### MaxThreadsFilter.doFilter —> getLocalPort=9060

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.MaxThreadsLimiterFilter -:::::- # RateLimitFilter Servlet =>繼續執行ERS請求，當前時段計數為：49

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -::::- ### PICFilter.doFilter —> getPathInfo=/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getMethod=GET

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getRequestURL=https://ise-bridge.ise-bridge.svc.cluster.local:8080/ers/config/sessionservicenode

    2025-06-07 22:49:00,957 DEBUG [ers-http-pool18][[]] cpm.ers.app.web.PICFilter -::::- #### PICFilter.doFilter —> getRemoteHost=10.62.113.211

    修訂記錄

    修訂 發佈日期 意見
    1.0
    27-Jun-2025
    初始版本
    TAC Authored

    由思科工程師貢獻

    • 達薇亞·辛哈
      技術諮詢工程師

    這份文件是否有所幫助？

    Feedback意見

    讓思科協助您

    本文件適用於這些產品