HP 3350 - Cisco NAC Appliance Spezifikationen PDF herunterladen (Seite 88)

100

101

2-38

Cisco NAC Appliance - Clean Access Manager Configuration Guide

OL-28003-01

Chapter 2 Device Management: Adding Clean Access Servers, Adding Filters

Integrating Cisco ISE Profiler

• Username – Enter the name of the CAM web console admin user.

• Password – Enter the password for the CAM web console admin user.

Step 4 Click Submit.

For further details on the Cisco ISE Profiler, refer to the Cisco Identity Services Engine User Guide on

Cisco.com at:

http://www.cisco.com/en/US/products/ps11640/products_user_guide_list.html

Troubleshooting when Synchronizing the Cisco ISE

While synchronizing CAM with endpoints from Cisco ISE, the CAM tries to pull the details from

Cisco ISE. If you have issues while pulling the data, check the following:

• Go to Device Management > Filters > Configuration > Profiles > Configure > List and check the

ISE Profiler configuration.

–

Check the IP Address, Admin User Name, and Password.

–

Check whether the CAM is able to reach ISE Profiler.

• Go to Device Management > Filters > Configuration> Rules and check the rules configured.

–

Check the priority of rules set for regular expressions.

–

If the end-point got denied, check whether proper rule has been configured and enabled.

• Go to Device Management > Filters > Configuration > Profiler > Sync Settings page and click

Check Sync Status Now. The log messages that are displayed provide more information about the

synchronization.

While synchronizing Cisco ISE with CAM, the Cisco ISE tries to push the details to CAM. If you have

issues while pushing the data, check the following:

• In the Cisco ISE web console, go to Administration > Network Resources > NAC Managers.

• In the NAC Managers page, check the details of the CAM and the credentials.

Example Scenarios

Note The following are sample messages that may be displayed during various scenarios of synchronization.

Primary ISE connection failed, Secondary ISE is connected

com.cisco.nac.core.nacprofiler.job.FullSyncJob - Trying to connect to the URL:

https://9.9.9.11/ise/ProfilerConfig/EndPointPartial

2011-08-26 15:13:59.912 +0530 DefaultQuartzScheduler_Worker-1 ERROR

com.cisco.nac.core.nacprofiler.job.FullSyncJob - IOException:

java.net.NoRouteToHostException: No route to host

The above message is displayed when connection to Primary ISE has failed. This may happen when there

is an issue with the connectivity or when the credentials are not correct.

2011-08-26 15:13:59.949 +0530 DefaultQuartzScheduler_Worker-1 INFO

com.cisco.nac.core.nacprofiler.job.FullSyncJob - Connected to the URL :

https://9.9.10.10/ise/ProfilerConfig/EndPointPartial

1 2 ... 83 84 85 86 87 88 89 90 91 92 93 ... 680 681

Kommentare zu diesen Handbüchern

Keine Kommentare

HP 3350 - Cisco NAC Appliance Spezifikationen Seite 88

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für PC / Workstation Barebones HP 3350 - Cisco NAC Appliance