Solved: Restore configuration hanging ISE2.7 patch 1

sTalub · ‎09-26-2020

Hello,

There is a brand new deployment (primary/secondary node). That was the first time when I used "restore config procedure" and it stuck. I've been waiting for 4 hours without any luck. I bet it's still hanging there. I don't have access right now. But I will have it on Monday.

Has anyone ever seen "the newline symbol" (look at the screen in the attachment) in a backup file name and repository name? I have a lab environment, and everything is working perfectly well there. And I don't see any newline symbols.

It also doesn't show any progress: and the progress message: they are blank. They are still blank.

What could be the reason for that, and how can I safely stop this revert config process without doing any harm to the production environment?

Looks like something is wrong when you use the restore button from Internet Explorer (as we did). Is it possible that Internet Explorer put some symbols (newline) and that's why it stack?
In my lab environment, this button doesn't work from IE, but it works in Chrome.

I wasn't able to find any information on how to stop the revert process.

sTalub · ‎10-01-2020

Hello hslai,

Thank you for finding the time and recreating this issue in your lab environment. But the issue is much worse than that. A specific IE Build lets you run this config restore process and it hangs it. Among all possible builds, we had this one. Unfortunately, I wasn't able to find this build for my lab environment test. But I took a screen. Maybe later I'll test it. If you have the opportunity to download a specific IE builds try to test it, please. Of course, I'm not sure that this IE build is the exact reason. Maybe it's a localization issue or anything else. But this is a good place to start an investigation.

Finally. The way how I solved this situation. I had a config restore process that has been hanging for 3 days. On Monday I decided to try to stop ISE and reboot the server. ATTENTION. The best way in this situation is to involve Cisco TAC. Don't blame me if you break your production environment. I was in the middle of a new deployment that's why I was able to stop this hanging revert process safely. I entered "application stop ISE" command and it let me do that. It didn't show "DB is busy error". After that, I reloaded the server and everything was alright.

View solution in original post

marce1000 · ‎09-26-2020

From another ssh-connection issue :

show logging system ade/ADE.log tail
show logging app ise-psc.log tail

- Check if anything useful can be found.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

sTalub · ‎09-26-2020

These were the first commands that I've tried to use. I found them in another topic about backup hanging. But the output didn't show anything special. Unfortunately, I didn't save it. The output was like ISE is working normally, some DB sync messages e.t.c.

And another strange thing that I noticed. I can log in to the ISE web page. Usually, when you run the recovery process it's blocking web login and shows a message "Restore is in progress. Monitor restore progress on the node using "show restore status" CLI command." But this time I can log in into it and use all tabs. Looks like the config recovery process hasn't even started.

sTalub · ‎09-26-2020

I'm trying to emulate the issue in my lab environment. Does anyone know why this button doesn't work in my lab ISE2.7 from IE 11? It works from Chrome though.
That was the way how we started the restore process that day.

_Warren · ‎10-01-2020

ISE 2.7 Patch 1 Restore not functional. WebUI restore not working in Internet Explorer 11

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv90612

hslai · ‎09-28-2020

I am able to recreate your issue with the restore button so I opened a new bug CSCvv90612. It will take a couple of days to become visible to you.

I am unable to recreate your issue with newline characters so I am leaving it as it is.

sTalub · ‎10-01-2020

Hello hslai,

Thank you for finding the time and recreating this issue in your lab environment. But the issue is much worse than that. A specific IE Build lets you run this config restore process and it hangs it. Among all possible builds, we had this one. Unfortunately, I wasn't able to find this build for my lab environment test. But I took a screen. Maybe later I'll test it. If you have the opportunity to download a specific IE builds try to test it, please. Of course, I'm not sure that this IE build is the exact reason. Maybe it's a localization issue or anything else. But this is a good place to start an investigation.

Finally. The way how I solved this situation. I had a config restore process that has been hanging for 3 days. On Monday I decided to try to stop ISE and reboot the server. ATTENTION. The best way in this situation is to involve Cisco TAC. Don't blame me if you break your production environment. I was in the middle of a new deployment that's why I was able to stop this hanging revert process safely. I entered "application stop ISE" command and it let me do that. It didn't show "DB is busy error". After that, I reloaded the server and everything was alright.

hslai · ‎10-02-2020

Many thanks for the info.

The screenshot shows KB 4519974. Cumulative security update for Internet Explorer: October 8, 2019 shows it applicable to older Windows Client OS's (e.g. Windows 7 SP1) and older Windows Server OS. Microsoft has ended support for Windows 7 on January 14, 2020.