Листовка для Cisco Cisco Identity Services Engine 1.3

安全访问操作指南

故障排除

无法连接到

ISE pxGrid 节点

确保

Splunk 服务器的 FQDN 可通过 ISE 解析 DNS

检查

keystoreFilename 和密码

•

确保您具有正确的 keystoreFilename 和 truststoreFilename 路径

•

在 Linux 命令行上运行 Splunk 搜索字符串以帮助诊断问题

如果您看到以下内容：

java -jar /Applications/Splunk/etc/apps/Splunk_TA_cisco-ise/bin/lib/pxGrid_Search.jar pxGrid1.lab6.com test1

/Applications/Splunk/etc/apps/Splunk_TA_cisco-ise/bin/certs/mac.jks cisco123

/Applications/Splunk/etc/apps/Splunk_TA_cisco-ise/bin/certs/caroot1.jks cisco123 10.0.0.17 quarantine_ip

17:46:53.596 [Smack Listener Processor (0)] DEBUG com.cisco.pxgrid.GridConnection - associate presence packet

received (type=available, from=test1@xgrid.cisco.com)

17:46:55.266 [Thread-0] DEBUG c.c.p.internal.CapabilityManager - refreshing connection state...

17:46:55.273 [Thread-0] DEBUG c.c.p.internal.CapabilityManager - done refreshing connection state.

17:46:55.290 [Thread-0] DEBUG c.c.p.i.s.NotificationHandlerSmack - refreshing connection state...

17:46:55.291 [Thread-0] DEBUG c.c.p.i.s.NotificationHandlerSmack - done refreshing connection state.

17:46:55.502 [main] DEBUG c.c.p.internal.CapabilityManager - subscribed

(topic=EndpointProtectionServiceCapability-1.0)

这意味着

pxGrid 隔离操作已成功

第

34 页