topic Re: Cisco ISE docker0 interface in Network Access Control

Cisco ISE docker0 interface

mlaurencik — Thu, 22 Oct 2020 15:15:43 GMT

Hello community,

I'd like to ask, we deploy new ISE 2.6 and as we enabled SNMP monitoring, we started to receive alarms for "docer0" interface is down. Could someone shred some light onto what is this interface used for? Can it be disabled somehow? Under what circumstances it goes to "down" state? Do we need to monitor it?

thanks,

Martin

Re: Cisco ISE docker0 interface

balaji.bandi — Thu, 22 Oct 2020 15:33:44 GMT

ITs for Docker container, if you are not using environemnt you no need to monitor that.

make sure docker interace not conflict with your address space

# sh int

Re: Cisco ISE docker0 interface

mlaurencik — Fri, 23 Oct 2020 08:28:14 GMT

Hi BB,

what kind of "environment" ?

thanks,

Martin

Re: Cisco ISE docker0 interface

Greg Gibbs — Sun, 25 Oct 2020 22:29:05 GMT

The underlying Linux OS for ISE runs Docker with some container microservices to provide the Threat Centric NAC (TC-NAC) function. You can see these containers listed in the output of the 'show cpu usage' command. The Docker interface is an internal logical interface used for communicating between these services, so there should be no need to monitor it.

Re: Cisco ISE docker0 interface

mlaurencik — Mon, 26 Oct 2020 09:02:06 GMT

Thanks Greg ! 🙂