topic Re: ISE debug in Network Access Control

ISE debug

Kanan Huseynli — Sun, 21 Jul 2024 08:46:30 GMT

Hi All,

I need to know how to see ISE CLI debug outputs?

Command is simple "debug snmp all 7", however while I did nothing appeared on ISE node. Maybe I should check on some default file or need to run command similar to IOS terminal monitor. Could you please, answer how ise cli debugs are collected?

Note that, snmp debug is not available in GUI debug lis

Re: ISE debug

Torbjørn — Sun, 21 Jul 2024 08:53:54 GMT

They should just be output to the terminal session where the command has been issued. Do you see the same behavior for other facilities than SNMP as well?

Re: ISE debug

Kanan Huseynli — Sun, 21 Jul 2024 09:14:34 GMT

Nothing appears, but tcpdump proofs that there is incoming snmp get requests.

So, looks like there is issue in snmp application inside ISE.

Even I did no snmp-server enable and then snmp-server enable , nothing appeared (I expected something to see since I restarted protocol).

My config is simple:

snmp-server enable
snmp-server community [community] ro
snmp-server trap dskThresholdLimit 75
snmp-server engineid 0x01
snmp-server location [location]

Re: ISE debug

Torbjørn — Sun, 21 Jul 2024 09:36:16 GMT

I get the same result on my lab node. I get _some_ output for other facilities when running "debug all", but none for SNMP.

Which version are you running? I`m on 3.3p3

Re: ISE debug

Kanan Huseynli — Sun, 21 Jul 2024 10:17:33 GMT

3.2 as I mentioned above.

We have open TAC case, but before they reply I wanted to check myself. Asked TAC to join to webex to do live checks/debugs.

Originally, we have problem with snmp server connection. ISE gets packets but no response, so monitoring fails on new deployed ISE system.

Re: ISE debug

MHM Cisco World — Sun, 21 Jul 2024 10:25:47 GMT

ISE use for what?

If it for admin use

Debug aaa auth

If it for network access use

Debug mab

Debug dot1x

ISE is device not protocol.

Hope this help you

MHM

Re: ISE debug

Torbjørn — Sun, 21 Jul 2024 16:19:29 GMT

@Kanan Huseynli, Please report back how they debug this

Re: ISE debug

Kanan Huseynli — Sun, 21 Jul 2024 19:30:15 GMT

I'm pretty much aware what is ISE.

I'm asking how to see debug outputs which is executed from ISE CLI.

Re: ISE debug

MHM Cisco World — Sun, 21 Jul 2024 20:14:37 GMT

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/212594-debugs-to-troubleshoot-on-ise.html

you can use debug in GUI it must better than CLI
what issue you have abd you need to see debug ?

Thanks

MHM