New ISE PSN VM from OVA missing port 8181

henry.astorga — Wed, 23 Apr 2025 18:49:51 GMT

Has anyone run into case of new PSN VM node freshly deployed via OVA with all expected services started and ise initialized but missing a specific port listening? I have tried to reset-config but the server comes back with the same issue of udp port 8181 not open. I have patched the 3.2 server with patch 7 to match the latest patch in the deployment and it registers as expected. The only differenec is that the previous patch 6 is not in the patch history. The same OVA file was used to deploy the servers.

Working as expected server with expected ports listening

Version information of installed applications
---------------------------------------------

Cisco Identity Services Engine
---------------------------------------------
Version : 3.2.0.542
Build Date : Wed Oct 19 11:27:24 2022
Install Date : Sat Jun 15 08:17:44 2024

Cisco Identity Services Engine Patch
---------------------------------------------
Version : 6
Install Date : Sun Jun 16 02:32:28 2024

Cisco Identity Services Engine Patch
---------------------------------------------
Version : 7
Install Date : Sun Jan 19 16:47:47 2025

ISW121/admin#show port
ports
process : 3817739/stunnel
tcp: 10.73.118.21:6379
process : 444535/redis-server
tcp: 127.0.0.1:6379
process : 1/systemd
udp: 0.0.0.0:111
tcp: 0.0.0.0:111, :::111, :::111
process : 451499/gomond.bin
tcp: 127.0.0.1:8912
process : 449317/conmon
tcp: 0.0.0.0:80, 0.0.0.0:19444, 0.0.0.0:19001, 0.0.0.0:443
process : 499220/nginx: maste
tcp: 0.0.0.0:8084
process : 2924/confd
tcp: 127.0.0.1:4565, 0.0.0.0:9888, 127.0.0.1:8008
process : 2643/sshd: /usr/sbi
tcp: 0.0.0.0:22, :::22
process : 2753174/conmon
tcp: 0.0.0.0:15672, 0.0.0.0:8671, 127.0.0.1:8672
process : 456596/jsvc.exec
udp: 0.0.0.0:11532,169.254.2.1:29183,0.0.0.0:33014,169.254.2.1:35899,169.254.4.1:36288,10.73.118.21:39820,169.254.4.1:58459,10.73.118.21:61062,0.0.0.2:64526,169.254.4.1:1645,169.254.2.1:1645,10.73.118.21:1645,127.0.0.1:1645,169.254.4.1:1646,169.254.2.1:1646,10.73.118.21:1646,127.0.0.1:1646,169.254.4.1:1700,169.254.2.1:1700,10.73.118.21:1700,127.0.0.1:1700,169.254.4.1:1812,169.254.2.1:1812,10.73.118.21:1812,127.0.0.1:1812,169.254.4.1:1813,169.254.2.1:1813,10.73.118.21:1813,127.0.0.1:1813,169.254.4.1:2083,169.254.2.1:2083,10.73.118.21:2083,127.0.0.1:2083,169.254.4.1:3799,169.254.2.1:3799,10.73.118.21:3799,127.0.0.1:3799
tcp: 127.0.0.1:8888, :::8905, 10.73.118.21:8650, :::5514, :::9002, :::1099, 10.73.118.21:8333, :::17261, :::8910, 10.73.118.21:8334, :::9070, 10.73.118.21:8335, 10.73.118.21:8336, 10.73.118.21:8181, 10.73.118.21:7800, :::9080, 10.73.118.21:8666, 10.73.118.21:8443, 10.73.118.21:8444, 10.73.118.21:8447, 10.73.118.21:8448, 10.73.118.21:8449, :::9090, 10.73.118.21:8099, :::9443, 127.0.0.1:2020, :::9060, :::9061, :::9063, 10.73.118.21:8905, fe80::250:56ff:fe8:8905, 169.254.2.1:8905, fe80::cf6:12ff:fee:8905, 169.254.4.1:8905, fd00::1:8:1:8905, fe80::406e:15ff:fe:8905, fe80::7ca7:89ff:fe:8905, fe80::d0b9:7fff:fe:8905, fe80::5062:48ff:fe:8905, :::13910, 10.73.118.21:19603, fd00::1:8:1:19993, :::30514, :::30514, fd00::1:8:1:39907, :::50870, :::52605, :::62023, 10.73.118.21:67, fd00::1:8:1:1645, fd00::1:8:1:1646, fd00::1:8:1:1700, fd00::1:8:1:1812, fd00::1:8:1:1813, fd00::1:8:1:2083, fd00::1:8:1:3799
process : 443375/conmon
tcp: 127.0.0.1:5432
process : 458735/monit
tcp: 127.0.0.1:2812, ::1:2812
process : 457146/jsvc.exec
tcp: 0.0.0.0:2560, 0.0.0.0:9444, 0.0.0.0:2560
process : 427409/ora_d000_cpm
udp: ::12301
tcp: , ::1:33520
process : 426659/tnslsnr
udp: ::1521
tcp: , :::2484, :::1521
process : 427411/ora_s000_cpm
udp: :1:11501
process : 427393/ora_lreg_cpm
udp: :1:48117
process : 1110/chronyd
udp: :1:323

Newly built sever missing port 8181 listening

Version information of installed applications
---------------------------------------------

Cisco Identity Services Engine
---------------------------------------------
Version : 3.2.0.542
Build Date : Wed Oct 19 11:27:24 2022
Install Date : Tue Apr 22 18:21:22 2025

Cisco Identity Services Engine Patch
---------------------------------------------
Version : 7
Install Date : Tue Apr 22 21:39:21 2025

ISW122/admin#show port
ports
process : 1/systemd
udp: 0.0.0.0:111
tcp: 0.0.0.0:111, :::111, :::111
process : 257729/conmon
tcp: 0.0.0.0:80, 0.0.0.0:19444, 0.0.0.0:19001, 0.0.0.0:443
process : 313746/nginx: maste
tcp: 0.0.0.0:8084
process : 3256/confd
tcp: 127.0.0.1:4565, 0.0.0.0:9888, 127.0.0.1:8008
process : 2872/sshd: /usr/sbi
tcp: 0.0.0.0:22, :::22
process : 292589/jsvc.exec
udp: 169.254.4.1:1645,169.254.2.1:1645,10.73.118.22:1645,127.0.0.1:1645,169.254.4.1:1646,169.254.2.1:1646,10.73.118.22:1646,127.0.0.1:1646,169.254.4.1:1700,169.254.2.1:1700,10.73.118.22:1700,127.0.0.1:1700,169.254.4.1:1812,169.254.2.1:1812,10.73.118.22:1812,127.0.0.1:1812,169.254.4.1:1813,169.254.2.1:1813,10.73.118.22:1813,127.0.0.1:1813,169.254.4.1:2083,169.254.2.1:2083,10.73.118.22:2083,127.0.0.1:2083,169.254.4.1:3799,169.254.2.1:3799,10.73.118.22:3799,127.0.0.1:3799,0.0.0.0:14863,10.73.118.22:19936,0.0.0.0:30167,169.254.4.1:30598,169.254.4.1:34127,10.73.118.22:35479,169.254.2.1:43325,169.254.2.1:44866,0.0.0.2:49720
tcp: 127.0.0.1:8888, :::13239, :::9080, :::9090, :::9443, 127.0.0.1:2020, :::9060, :::9061, :::9063, :::8905, :::5514, :::9002, :::1099, :::8910, :::9070, fd00::1:8:1:1645, fd00::1:8:1:1646, fd00::1:8:1:1700, fd00::1:8:1:1812, fd00::1:8:1:1813, fd00::1:8:1:2083, fd00::1:8:1:3799, 10.73.118.22:8905, fe80::250:56ff:fe8:8905, 169.254.2.1:8905, fe80::84b8:ff:fe28:8905, 169.254.4.1:8905, fe80::c0dc:f8ff:fe:8905, fd00::1:8:1:8905, fe80::250:56ff:fe8:8905, fe80::250:56ff:fe8:8905, fe80::250:56ff:fe8:8905, fe80::1498:32ff:fe:8905, fe80::250:56ff:fe8:8905, fe80::9c73:64ff:fe:8905, fe80::8000:3eff:fe:8905, fe80::250:56ff:fe8:8905, :::29195, :::30514, :::30514, :::39195, fd00::1:8:1:48598, fd00::1:8:1:51874, :::52361, :::64461, 10.73.118.22:67
process : 290413/conmon
tcp: 0.0.0.0:15672, 0.0.0.0:8671, 127.0.0.1:8672
process : 250615/conmon
tcp: 127.0.0.1:5432
process : 287785/monit
tcp: 127.0.0.1:2812, ::1:2812
process : 242397/jsvc.exec
tcp: 0.0.0.0:2560, 0.0.0.0:9444, 0.0.0.0:2560
process : 281277/java
udp: ::31823
tcp: , :::22927, :::31823, 127.0.0.1:7634, :::50509
process : 315878/java
udp: :1:9200
tcp: , 127.0.0.1:9301
process : 265554/tnslsnr
udp: ::1521
tcp: , :::2484, :::1521
process : 259444/grafana-serv
udp: ::3011
process : 255917/prometheus
udp: ::9091
process : 260983/node_exporte
udp: ::9100
process : 265916/ora_d000_cpm
udp: ::12301
tcp: , ::1:31749
process : 1195/chronyd
udp: 27.0.0.1:323
tcp: , ::1:323
process : 265888/ora_lreg_cpm
udp: :1:21242
process : 265920/ora_s000_cpm
udp: :1:36002

ISW122/admin#

Re: New ISE PSN VM from OVA missing port 8181

Greg Gibbs — Wed, 23 Apr 2025 22:41:11 GMT

UDP port 8181 is not a standard port that would be listening on ISE by default.

Do you have a portal configured to use this port, or what other service are you expecting to use it? That information might provide a direction to look.

Re: New ISE PSN VM from OVA missing port 8181

henry.astorga — Thu, 24 Apr 2025 03:07:39 GMT

Hello Greg, thank you for helping me think to look in the right direction. I found a certificate issue for the portal server!

Regards,
Henry

topic Re: New ISE PSN VM from OVA missing port 8181 in Network Access Control

New ISE PSN VM from OVA missing port 8181

Re: New ISE PSN VM from OVA missing port 8181

Re: New ISE PSN VM from OVA missing port 8181