ISE debug

[Kanan Huseynli]

Hi All,

I need to know how to see ISE CLI debug outputs?

Command is simple "debug snmp all 7",  however while I did nothing appeared on ISE node. Maybe I should check on some default file or need to run command similar to IOS terminal monitor. Could you please, answer how ise cli debugs are collected?

Note that, snmp debug is not available in GUI debug lis

[Torbjørn]

They should just be output to the terminal session where the command has been issued. Do you see the same behavior for other facilities than SNMP as well?

[Kanan Huseynli]

Nothing appears, but tcpdump proofs that there is incoming snmp get requests.

So, looks like there is issue in snmp application inside ISE.

Even I did no snmp-server enable and then snmp-server enable , nothing appeared (I expected something to see since I restarted protocol).

My config is simple:

snmp-server enable
snmp-server community [community] ro
snmp-server trap dskThresholdLimit 75
snmp-server engineid 0x01
snmp-server location [location]

[Torbjørn]

I get the same result on my lab node. I get _some_ output for other facilities when running "debug all", but none for SNMP.

Which version are you running? I`m on 3.3p3

[Kanan Huseynli]

3.2 as I mentioned above.

We have open TAC case, but before they reply I wanted to check myself. Asked TAC to join to webex to do live checks/debugs.

Originally, we have problem with snmp server connection. ISE gets packets but no response, so monitoring fails on new deployed ISE system.

[Torbjørn]

@Kanan Huseynli, Please report back how they debug this

[MHM Cisco World]

ISE use for what?

If it for admin use 

Debug aaa auth 

If it for network access use

Debug mab

Debug dot1x 

ISE is device not protocol. 

Hope this help you 

MHM

[Kanan Huseynli]

I'm pretty much aware what is ISE.

I'm asking how to see debug outputs which is executed from ISE CLI.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/212594-debugs-to-troubleshoot-on-ise.html

you can use debug in GUI it must better than CLI 
what issue you have abd you need to see debug ?

Thanks 

MHM