topic Re: Cisco ISE 2.3 Database in Network Access Control

Cisco ISE 2.3 Database

saxenanitesh8522 — Mon, 05 Feb 2018 17:34:13 GMT

Hi guys,

I had a issue where Node 2 and Node 1 lost communication. there was a issue in Node 1 and it got corrupted and it was not able release node 2.

i reimaged node 1 and tried to join it back but it failed.

I think there something wrong in the database of Node 2 as well where it's not able to replicate the logs and all the required details properly and getting these log's

2018-02-05 12:24:07,148 INFO [ise-Replayer-1][] cisco.cpm.deployment.replication.MasterNodeProxy -::::- Getting change data records from 588816 to 588825 from master 1cf4a9c6-f286-9444-51e2-fc36d2c22611

2018-02-05 12:24:07,153 ERROR [ise-Replayer-1][] cisco.cpm.deployment.replication.ReplayerImpl -::::- Could not get all the missing change data records from 588816 to 588825

2018-02-05 12:24:07,153 ERROR [ise-Replayer-1][] cisco.cpm.deployment.replication.ReplayerImpl -::::- Could not apply all missing change records. Expected to apply upto 597320 but applied only upto 588815

I wanted to know if i do a application config ise and do a database reset and purge can this help in clearing all the database in the node 1 and node 2 to make sure there is no database so it's clean.

Please let me know your suggestions.

Re: Cisco ISE 2.3 Database

kthiruve — Mon, 05 Feb 2018 21:10:11 GMT

Hi Nitesh,

If it is a production network and impacting users please open a TAC case for quick and easy resolution.

Need additional information about the deployment nodes, type of deployment to answer question.

Are these nodes PAN's, PSNs or what?

Resetting db in a production deployment will clear everything and not recommended. If you are doing it make sure you should have a backup and you are doing it for specific reasons. However yes, it will clean up your db. If it is test only , take a backup before resetting the db so that you have a copy of the db for later use in case you need it.

Thanks

Krishnan

Re: Cisco ISE 2.3 Database

saxenanitesh8522 — Wed, 07 Feb 2018 14:47:38 GMT

Hi Krishan,

if i do a configuration backup and do a restore will there be a database details in that?

Because i am thinking to take a backup of the configuration and do a restore.

Please let me know your feedback.

Re: Cisco ISE 2.3 Database

hslai — Fri, 09 Feb 2018 02:10:01 GMT

Yes, you may take a backup, reset/re-build the broken node, and then restore.

Re: Cisco ISE 2.3 Database

saxenanitesh8522 — Sun, 11 Feb 2018 12:30:31 GMT

dear hslai,

as i request does the backup have the databse details? or it will be just the configuration which we are doing the backup?

Re: Cisco ISE 2.3 Database

hslai — Sun, 11 Feb 2018 15:05:38 GMT

The CFG backup includes the database details on policies, policy elements, internal endpoints, internal users, administrator configurations, etc. It does not include operational data for reports. If you need operational data, take an OPS backup. Also, if you use ISE internal CA, please export its info via ISE admin CLI.