重置身份服务引擎(ISE)情景可视性

简介

本文档介绍如何在ISE分布式部署上执行情景可视性的重置和同步。

问题

如果情景可视性GUI无法加载，并显示“无法加载情景可视性页面”(Unable to load Context Visibility page)错误消息或控制面板计数器为空，则执行此过程。无法添加MAC地址，错误为“Unable to create the endpoint， Endpoint XX：XX：XX：XX：XX already exists”。当Context Visibility数据库与该终端的Oracle数据库不同步时会发生这种情况。

本文档说明如何在ISE分布式部署中执行情景可视性的重置和同步来解决这些问题。

解决方案

通过控制台或SSH连接到主管理节点（为简洁起见，省略了某些输出），然后使用application configure ise命令，然后使用option [20] Reset Context Visibility并同意继续y。 请勿回答最后一个问题：

primary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

20
This will remove all data from Context Visibility. Do you want to proceed [y/n]: y
Checking ISE persona
 - Done
Reset of indexing engine on this node needs to be run only after running it on Secondary Admin Node(secondary-node)
Is reset indexing engine started on Secondary Admin Node(secondary-node) [ Y/N ] :

在没有对最后一个问题的回复的情况下，请打开SSH或到辅助管理节点的控制台，然后使用命令application configure ise并随后使用选项[20] Reset Context Visibility并同意继续y。不要回答最后一个问题。

secondary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

20
This will remove all data from Context Visibility. Do you want to proceed [y/n]: y
Checking ISE persona
 - Done
Stopping monit services
 - Done
Stopping ISE indexing engine
 - Done
Unzip and making changes to vcs jar
 - Done
Modifying ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Performing reset of ISE indexing engine
 - Done
Stopping ISE indexing engine
 - Done
Removing backup of vcs jar
 - Done
Reverting changes to ISE indexing engine configuration
 - Done
Please proceed with running reset indexing engine on Primary Admin Node(primary-node) now. Once reset finishes on Primary Admin Node, please come back and press Y here
Is reset indexing engine done on Primary Admin Node(primary-node) [ Y/N ] :

如果对最后一个问题没有答复，请使用Y继续在主管理节点的SSH或控制台中操作。

Is reset indexing engine started on Secondary Admin Node(secondary-node) [ Y/N ] :Y
Verifying ISE indexing engine services on Secondary Admin Node
 - Done
Stopping monit services
 - Done
Stopping ISE indexing engine
 - Done
Unzip and making changes to vcs jar
 - Done
Modifying ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Performing reset of ISE indexing engine
 - Done
Stopping ISE indexing engine
 - Done
Removing backup of vcs jar
 - Done
Reverting changes to ISE indexing engine configuration
 - Done
Starting ISE indexing engine
 - Done
Starting monit services
 - Done
Reset of indexing engine on this node is complete. Please proceed with remaining steps on Secondary Admin Node(secondary-node)
Reset of Context Visibility is successful on this node

[0]从配置菜单退出，并使用Y继续进入辅助管理节点的SSH或控制台。

Is reset indexing engine done on Primary Admin Node(primary-node) [ Y/N ] :Y
Verifying ISE indexing engine services on Primary Admin Node
 - Done
Starting ISE indexing engine
 - Done
Starting monit services
 - Done
Reset of Context Visibility is successful on this node

[0]退出配置菜单。

在两个节点上执行情景可视性重置后，继续在主管理节点上执行同步：

primary-node/admin# application configure ise

Selection configuration option
~
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
~

21
This will synchronize Context Visibility with database. Do you want to proceed [y/n]: y
Copying files
 - Done
Changing permissions
 - Done
Exporting endpoints from database
 - Done
Importing endpoints into context visibility
 - Done

Synchronization of Context Visibility with Oracle is successful

[0]退出配置菜单。

确认索引引擎已在两个管理节点上运行。

primary-node/admin# show application status ise

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 3010
Database Server running 80 PROCESSES
Application Server running 8877
Profiler Database running 5420
ISE Indexing Engine running 13865
AD Connector running 11922
M&T Session Database running 5322
M&T Log Collector running 9019
M&T Log Processor running 8927
Certificate Authority Service disabled
EST Service disabled
SXP Engine Service disabled
Docker Daemon running 11469
TC-NAC Service disabled

Wifi Setup Helper Container disabled
pxGrid Infrastructure Service disabled
pxGrid Publisher Subscriber Service disabled
pxGrid Connection Manager disabled
pxGrid Controller disabled
PassiveID WMI Service disabled
PassiveID Syslog Service disabled
PassiveID API Service disabled
PassiveID Agent Service disabled
PassiveID Endpoint Service disabled
PassiveID SPAN Service disabled
DHCP Server (dhcpd) disabled
DNS Server (named) disabled