Hi All,
I'm facing an issue when trying to register FMC with ISE. " ISE_CONNECTION_RESULT_FAIL_HOST_REJECTS_BULKDOWNLOAD_HOSTNAME_QUERY" below is the error log
Primary host:
test: ISE connection.
Preparing ISE Connection objects...
Connecting to ISE server...
Beginning to connect to ISE server...
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: _reconnection_thread starts
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: pxgrid connection init done successfully
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: testing connecting to host XX.XX.XX.XX timeout=3 ...
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: testing connection to host OK XX.XX.XX.XX:Will use ip=XX.XX.XX.XX
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: connecting to host XX.XX.XX.XX ...
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: stream opened
Starting SSL Handshake, SSL state:before/connect initialization
Completed SSL Handshake, SSL state: SSL negotiation finished successfully
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: EXTERNAL authentication complete
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: authenticated successfully (sasl mechanism: EXTERNAL)
Captured Jabberwerx log:2019-11-11T13:10:28 [ INFO]: pxgrid_connection_connect: Connected. host=XX.XX.XX.XX
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: Controller version: 2.0.0.18
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: Account approved
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: CoreCapability successfully subscribed
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: _on_connect called
ISEConnection queries find the following capability states: [sessionDirectory: 1, endpointProfileMetaData: 1, securityGroupTagMetaData: 1, EPS: 1, ANC: 1]
Preparing subscription objects...
Subscribing to EndpointProfileMetaDataCapability.
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: EndpointProfileMetaDataCapability successfully subscribed
Subscribing to SecurityGroupTagMetaDataCapability.
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: TrustSecMetaDataCapability successfully subscribed
Subscribing to SessionDirectoryCapability.
Captured Jabberwerx log:2019-11-11T13:10:29 [ INFO]: SessionDirectoryCapability successfully subscribed
Subscribing to EndpointProtectionServiceCapability.
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: EndpointProtectionServiceCapability successfully subscribed
Subscribing to AdaptiveNetworkControlCapability.
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: AdaptiveNetworkControlCapability successfully subscribed
Done preparing subscription objects.
pxgrid_connection_query failed Capability not found request {http://www.cisco.com/pxgrid/identity}getSessionDirectoryHostnamesRequest
Failed to query SessionDirectory capability for bulk download hostnames.
ISE Server rejects bulk download hostname query.
...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_HOST_REJECTS_BULKDOWNLOAD_HOSTNAME_QUERY. Shutting down ISEConnection.
Unknown failure connecting to ISE server.
connectionHealthPollingThread starting.
connectionHealthPollingThread interrupted.
connectionHealthPollingThread ending.
disconnecting pxgrid
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: stream closed; err_dom=(null)
2019-11-11T13:10:30 [ INFO]: destroying client ...
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: _on_disconnect called
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: Event loop exit. status=1
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: pxgrid_connection_disconnect completes
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: _reconnection_thread exits
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: pxgrid_connection_disconnect completes
Secondary host:
test: ISE connection.
Preparing ISE Connection objects...
Connecting to ISE server...
Beginning to connect to ISE server...
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: _reconnection_thread starts
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: pxgrid connection init done successfully
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: testing connecting to host YY.YY.YY.YY timeout=3 ...
Captured Jabberwerx log:2019-11-11T13:10:30 [ ERROR]: socket host=YY.YY.YY.YY:ip=YY.YY.YY.YY:port=5222 NOT connected: Connection refused
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: _on_disconnect called
Captured Jabberwerx log:2019-11-11T13:10:30 [ ERROR]: _reconnection_thread error Remote connection Failed, Host/IP Address is not correct or pxgrid Server is not reachable
...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_CANNOT_CONNECT_HOST. Shutting down ISEConnection.
Unable to connect to ISE server at host: 'YY.YY.YY.YY'.
Unable to connect to ISE server at host: 'YY.YY.YY.YY'.
connectionHealthPollingThread starting.
connectionHealthPollingThread interrupted.
connectionHealthPollingThread ending.
disconnecting pxgrid
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: _reconnection_thread exits
Captured Jabberwerx log:2019-11-11T13:10:30 [ INFO]: pxgrid_connection_disconnect completes
|
ISE is on version 2.3 Patch 7 & FMC is on 6.2.3.14
think am not suppose to hit this CSCvo75376 as this is already resolved in 2.3 patch 7. Time on both the appliances are properly synced and verified.
from the logs " pxgrid_connection_query failed Capability not found " did i need to enable anything from ISE side...???
Regards,
Abheesh
