Cisco ISE docker0 interface

[mlaurencik]

Hello community,

I'd like to ask, we deploy new ISE 2.6 and as we enabled SNMP monitoring, we started to receive alarms for "docer0" interface is down. Could someone shred some light onto what is this interface used for? Can it be disabled somehow? Under what circumstances it goes to "down" state? Do we need to monitor it?

thanks,

Martin

[balaji.bandi]

ITs for Docker container, if you are not using environemnt you no need to monitor that.

make sure docker interace not conflict with your address space

# sh int

[mlaurencik]

Hi BB,

what kind of "environment" ?

thanks,

Martin

[Greg Gibbs · Accepted solution]

The underlying Linux OS for ISE runs Docker with some container microservices to provide the Threat Centric NAC (TC-NAC) function. You can see these containers listed in the output of the 'show cpu usage' command. The Docker interface is an internal logical interface used for communicating between these services, so there should be no need to monitor it.

[mlaurencik]

Thanks Greg !