unable to integrate ise with fmc

[vishal77]

Hello All,

I'm trying to integrate ise with fmc as a identity source but getting below error. Can anyone please help me regarding this.

Primary host:
test: ISE connection.
Preparing ISE Connection objects...
Connecting to ISE server...
Beginning to connect to ISE server...
Captured Jabberwerx log:2020-11-21T10:17:51 [    INFO]: _reconnection_thread starts
Captured Jabberwerx log:2020-11-21T10:17:51 [    INFO]: pxgrid connection init done successfully
Captured Jabberwerx log:2020-11-21T10:17:51 [    INFO]: testing connecting to host 192.168.240.37 timeout=3 ...
Captured Jabberwerx log:2020-11-21T10:17:54 [   ERROR]: connection timed out while trying to test connection to host=192.168.240.37:ip=192.168.240.37:port=5222
Captured Jabberwerx log:2020-11-21T10:17:54 [    INFO]: _on_disconnect called
...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_CANNOT_CONNECT_HOST.  Shutting down ISEConnection.
Unable to connect to ISE server at host: '192.168.240.37'.
connectionHealthPollingThread starting.
connectionHealthPollingThread ending.
disconnecting pxgrid
Captured Jabberwerx log:2020-11-21T10:17:54 [    INFO]: _reconnection_thread exits
Captured Jabberwerx log:2020-11-21T10:17:54 [    INFO]: pxgrid_connection_disconnect completes

for information: 

ISE deployed in standlone mode and ip address is 192.168.240.37

Fmc ip address 192.168.240.41

[Rob Ingram]

@vishal77 

Is the pxgrid service enabled and started on ISE?

Has the FMC client been approved under ISE?

[vishal77]

Hello Rob,

Thanks for the reply.

Yes i have checked pxgrid services is enable and also fmc client is online PFA for same. But not getting it why still getting below error logs while intergration. Could it be a different time settings in ISE and FMC ? PFA timezone for ise and fmc. 

Primary host:
test: ISE connection.
Preparing ISE Connection objects...
Connecting to ISE server...
Beginning to connect to ISE server...
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: _reconnection_thread starts
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: pxgrid connection init done successfully
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: testing connecting to host 192.168.240.37 timeout=3 ...
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: testing connection to host OK 192.168.240.37:Will use ip=192.168.240.37
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: connecting to host 192.168.240.37 ...
Captured Jabberwerx log:2020-11-22T07:42:26 [ INFO]: stream opened
Starting SSL Handshake, SSL state:before/connect initialization
Completed SSL Handshake, SSL state: SSL negotiation finished successfully
Captured Jabberwerx log:2020-11-22T07:42:56 [ INFO]: EXTERNAL authentication complete
Captured Jabberwerx log:2020-11-22T07:42:56 [ INFO]: authenticated successfully (sasl mechanism: EXTERNAL)
Captured Jabberwerx log:2020-11-22T07:42:58 [ INFO]: pxgrid_connection_connect: Connected. host=192.168.240.37
Captured Jabberwerx log:2020-11-22T07:43:00 [ ERROR]: send and wait failed
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: stream closed; err_dom=(null)
2020-11-22T07:43:01 [ ERROR]: _iq_response_callback timeout
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: destroying client ...
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: _on_disconnect called
...failed to connect to ISE server, with error:ISE_CONNECTION_RESULT_FAIL_CANNOT_CONNECT_HOST. Shutting down ISEConnection.
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: Event loop exit. status=1
Unable to connect to ISE server at host: '192.168.240.37'.
Captured Jabberwerx log:2020-11-22T07:43:01 [ ERROR]: _connect_request_to_controller error: Timeout
Captured Jabberwerx log:2020-11-22T07:43:01 [ ERROR]: _reconnection_thread error Timeout
connectionHealthPollingThread starting.
connectionHealthPollingThread ending.
disconnecting pxgrid
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: _reconnection_thread exits
Captured Jabberwerx log:2020-11-22T07:43:01 [ INFO]: pxgrid_connection_disconnect completes

[Mohammed al Baqari · Accepted solution]

What version is used in ISE and FMC.? On your snapshot, I don't see FMC
subscribed to any client group. So your FMC isn't online on ISE.

On ISE PxGrid, can you select live logs tab and perform the testing to see
what is happening.

**** please remember to rate useful posts