重置身份服務引擎(ISE)情景可視性

簡介

本文檔介紹如何在ISE分散式部署上執行情景可視性的重置和同步。

問題

如果無法載入情景可視性GUI，並顯示「無法載入情景可視性頁面」錯誤消息或儀表板計數器為空，則執行此過程。無法增加MAC地址，錯誤為「Unable to create the endpoint， Endpoint XX：XX：XX：XX：XX exists」。當Context Visibility資料庫與該端點的Oracle資料庫不同步時，就會發生這種狀況。

本文檔說明如何在ISE分散式部署中執行情景可視性的重置和同步以解決這些問題。

解決方案

透過控制檯或SSH連線到主管理節點（為簡潔起見，省略了某些輸出），然後使用應用程式配置ise命令，然後選項[20] Reset Context Visibility and agreement繼續y。 請勿回覆最後一個問題：

primary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

20
This will remove all data from Context Visibility. Do you want to proceed [y/n]: y
Checking ISE persona
 - Done
Reset of indexing engine on this node needs to be run only after running it on Secondary Admin Node(secondary-node)
Is reset indexing engine started on Secondary Admin Node(secondary-node) [ Y/N ] :

在沒有回答最後一個問題的情況下，請打開SSH或到輔助管理節點的控制檯，然後使用命令application configure ise，然後使用選項[20] Reset Context Visibility和同意繼續y。不要回答最後一個問題。

secondary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

20
This will remove all data from Context Visibility. Do you want to proceed [y/n]: y
Checking ISE persona
 - Done
Stopping monit services
 - Done
Stopping ISE indexing engine
 - Done
Unzip and making changes to vcs jar
 - Done
Modifying ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Performing reset of ISE indexing engine
 - Done
Stopping ISE indexing engine
 - Done
Removing backup of vcs jar
 - Done
Reverting changes to ISE indexing engine configuration
 - Done
Please proceed with running reset indexing engine on Primary Admin Node(primary-node) now. Once reset finishes on Primary Admin Node, please come back and press Y here
Is reset indexing engine done on Primary Admin Node(primary-node) [ Y/N ] :

如果對最後一個問題沒有答覆，請使用Y繼續在主管理節點的SSH或控制檯中執行。

Is reset indexing engine started on Secondary Admin Node(secondary-node) [ Y/N ] :Y
Verifying ISE indexing engine services on Secondary Admin Node
 - Done
Stopping monit services
 - Done
Stopping ISE indexing engine
 - Done
Unzip and making changes to vcs jar
 - Done
Modifying ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Performing reset of ISE indexing engine
 - Done
Stopping ISE indexing engine
 - Done
Removing backup of vcs jar
 - Done
Reverting changes to ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Starting monit services
 - Done
Reset of indexing engine on this node is complete. Please proceed with remaining steps on Secondary Admin Node(secondary-node)
Reset of Context Visibility is successful on this node

[0]退出配置選單，然後使用Y繼續在輔助管理節點的SSH或控制檯中執行。

Is reset indexing engine done on Primary Admin Node(primary-node) [ Y/N ] :Y
Verifying ISE indexing engine services on Primary Admin Node
 - Done
Starting ISE indexing engine
 - Done
Starting monit services
 - Done
Reset of Context Visibility is successful on this node

[0]退出配置選單。

在兩個節點上執行環境可視性重設之後，請在主要管理節點上繼續同步處理：

primary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

21
This will synchronize Context Visibility with database. Do you want to proceed [y/n]: y
Copying files
 - Done
Changing permissions
 - Done
Exporting endpoints from database
 - Done
Importing endpoints into context visibility
 - Done

Synchronization of Context Visibility with Oracle is successful

[0]退出配置選單。

確認索引引擎是否正在兩個管理節點上執行。

primary-node/admin# show application status ise

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 3010
Database Server running 80 PROCESSES
Application Server running 8877
Profiler Database running 5420
ISE Indexing Engine running 13865
AD Connector running 11922
M&T Session Database running 5322
M&T Log Collector running 9019
M&T Log Processor running 8927
Certificate Authority Service disabled
EST Service disabled
SXP Engine Service disabled
Docker Daemon running 11469
TC-NAC Service disabled

Wifi Setup Helper Container disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
PassiveID WMI Service disabled
PassiveID Syslog Service disabled
PassiveID API Service disabled
PassiveID Agent Service disabled
PassiveID Endpoint Service disabled
PassiveID SPAN Service disabled
DHCP Server (dhcpd) disabled
DNS Server (named) disabled