topic Error in connecting to dataconnect in Network Access Control

Error in connecting to dataconnect

jagritibhardwaj471 — Fri, 10 Jan 2025 05:59:02 GMT

I am unable to establish a connection with the oracle database of Ise . Is there any command on cli to check which processes are running on which ports, so that i can be sure , that the details I am entering are correct .I am unable to see any commands for this . Also , if u could provide commands for CLI for ISE 3.3 to see which service/process is running on which port .

Basically , I want to check , after enabling the dataconnect feature the oracle db is running on which port , and what is the host IP. Because i am unable to connect to the oracle db , the error i am encountering is ,

ORA-12541: Cannot connect. No listener at host <ip of Ise server> port 2484.

I have checked show application status ise,

application status ise

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 7711
Database Server running 133 PROCESSES

This indicates that the process is running , but we do not know on which port , because when i run the command

--> show port | include 2484

I do not see any output , which indicates there is no service running on the port 2484 , how can i find out on which port is the db running ?

When i am trying to connect to the db using the dbVisualizer , using the url:

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=<host_ip> )(PORT=2484))(CONNECT_DATA=(SID=cpm10)))

The error i encounter is: ORA-12541: Cannot connect. No listener at host <host_ip> port 2484. (CONNECTION_ID=JcB694LeSfuKfwVi8A7L4w==)

Re: Error in connecting to dataconnect

Arne Bier — Fri, 10 Jan 2025 06:44:45 GMT

Port 2484 is the default TCP port that is used when you enable the feature.

Is there a firewall between your visualizer and ISE?

rnolabise01/admin#tech netstat | include 2484 tcp6 0 0 :::2484 :::* LISTEN 8592/tnslsnr

I can't get it to connect with my BeaverSQL tool. When I toggled DataConnect off and on again (and a fresh password), now I get nothing in netstat output. So perhaps I missed something. Seems a bit temperamental. Having said that, my lab is currently in Eval Mode. Perhaps that's an issue.

I have not used it since upgrading to ISE 3.4 - but in 3.2 it worked pretty well.

Re: Error in connecting to dataconnect

Arne Bier — Fri, 10 Jan 2025 06:58:30 GMT

It's working on my standby PAN with the show ports command:

process : 505887/tnslsnr udp: ::1521 tcp: , :::2484, :::1521

I am able to browse to it via thin client

I think my primary admin node is toast.

Re: Error in connecting to dataconnect

Arne Bier — Fri, 10 Jan 2025 07:10:37 GMT

AAAhh ok - it appears that DataConnect only runs on one node at a time. In my case, it's PAN02, which explains why it works there, and not on my primary PAN.

You won't find the TCP port (tnslsnr) on the other nodes.

Re: Error in connecting to dataconnect

thomas — Tue, 14 Jan 2025 01:03:20 GMT

I don't know which node <host_ip> is, but remember that the Data Connect feature runs on the Primary MNT node - not the PAN node. These may or may not be the same node, depending on your deployment so verify which has primary MNT persona. Your DSN looks fine otherwise.

When I dump my OracleDB Connection String from my iseql.py script using the oracledb package (in my case, the PMNT is on the PPAN):

❱ iseql.py "SELECT command,command_args FROM TACACS_COMMAND_ACCOUNTING" --level DEBUG
2025-01-09 05:11:20.746 | DEBUG | iseql | <module> | OracleDB Connection String: (DESCRIPTION=(RETRY_COUNT=3)(RETRY_DELAY=3)(ADDRESS=(PROTOCOL=tcps)(HOST=ise-ppan.demo.local)(PORT=2484))(CONNECT_DATA=(SERVICE_NAME=cpm10))

You will also want to verify you can ping your ISE Primary MNT node and there is no firewall blocking port 2484 between you and the ISE Primary MNT node.

We have done a couple ISE Webinars to show you how to use Data Connect:

▷ Next Generation ISE Telemetry, Monitoring, and Custom Reporting Part 2 |
06:00 Reports vs Data Connect
08:10 Data Connect (ISE 3.2 and later)
▷How to Get Data Out of ISE | 2024-04-02
48:32 ISE Data Connect

Re: Error in connecting to dataconnect

jagritibhardwaj471 — Tue, 14 Jan 2025 05:54:35 GMT

Hey , I am using dbVisualizer to view data , this is the url :

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=<host_ip>)(PORT=2484))(CONNECT_DATA=(SID=cpm10)))

and the error i am encountering is :

Long Message:
ORA-12541: Cannot connect. No listener at host <host_ip> port 2484. (CONNECTION_ID=9BJBbluRTC6/SpR/tIRzYw==)
https://docs.oracle.com/error-help/db/ora-12541/

Details:
   Type: java.sql.SQLException
   Error Code: 12541
   SQL State: 66000

Although i have verified on the cli , that the database listener is running ,

--> show application status ise

ISE PROCESS NAME STATE PROCESS ID
--------------------------------------------------------------------
Database Listener running 3897968
Database Server running 129 PROCESSES

-->show process | include 3897968

oracle 3897968 ? 1 Fri Jan 10 12:34:29 2025 /opt/oracle/base/product/19 00:00:24

Also i am able to telnet the ise-ip on port 2484 , that means there is not firewall blocking the connection .

Actually , i have only one node , so i guess this by default is the primary monitoring node.

Re: Error in connecting to dataconnect

jagritibhardwaj471 — Tue, 14 Jan 2025 06:04:19 GMT

Hey , I have only one node in my setup , so i guess this by defalut makes it a primary-mnt node. But i am still encountering the connectivity issue, I am using DbVisualizer ,

, this is the url :

jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=<host_ip>)(PORT=2484))(CONNECT_DATA=(SID=cpm10)))

and the error i am encountering is :

Long Message:
ORA-12541: Cannot connect. No listener at host <host_ip> port 2484. (CONNECTION_ID=9BJBbluRTC6/SpR/tIRzYw==)
https://docs.oracle.com/error-help/db/ora-12541/

Details:
   Type: java.sql.SQLException
   Error Code: 12541
   SQL State: 66000

Re: Error in connecting to dataconnect

jagritibhardwaj471 — Tue, 14 Jan 2025 07:27:15 GMT

Also I have seen these ISE Webinars to show you how to use Data Connect, and I have followed the exact steps mentioned in here, to establish the connection through DbVisualizer , still I am facing the error mentioned above.