question Re: CIsco ISE Discovery in ITOM forum

CIsco ISE Discovery

Insomaniac — Thu, 08 Nov 2018 07:11:55 GMT

HI,

I am trying to discover the CISCO ISE in my environment with the SNMP credentials first i got the error as active but not identified for which i put the oid from the payload as <sysObjectID oid="1.3.6.1.2.1.1.2.0" type="SnmpObjectId">.1.3.6.1.4.1.9.1.1426</sysObjectID> i Put the 1.3.6.1.4.1.9.1.1426 in the OID

but after putting the SNMP OID i am getting the error as Identified, not updating CI. Could anyone let me know how i can resolve this issue as i am new to discovery don't know much of the troubleshooting.

Re: CIsco ISE Discovery

robertgeen — Thu, 08 Nov 2018 13:27:00 GMT

Are there other error messages in the log files? If not I would go into discovery properties and turn on identification debug. This will tell you exactly what it's matching on and what it isn't. There's a change you have a multi-match situation happening and it's not updating due to multiple CIs with the same identifiable attributes matching. Start by putting identification in debug and then post the results in here of it.

Re: CIsco ISE Discovery

doug_schulze — Thu, 08 Nov 2018 16:58:14 GMT

Have you gone through the steps such as creating a classifier for that device? Included the identifier for that class?

Re: CIsco ISE Discovery

Insomaniac — Fri, 09 Nov 2018 14:42:01 GMT

No i just created the new SNMP OID only and checked the result for this.

As i stated i am new to servicenow discovery & don't have this knowledge to create the classification.

Would you please help me in this how to proceed and how can i resolve this

Re: CIsco ISE Discovery

doug_schulze — Fri, 09 Nov 2018 17:23:15 GMT

I did a video that walks you through the process.

https://www.youtube.com/watch?v=6ULRbpGOSB4&feature=youtu.be

And you should absolutely take the discovery course...

Re: CIsco ISE Discovery

Insomaniac — Sat, 10 Nov 2018 13:41:41 GMT

After enabling the debugging the error which i am getting is

05:36:33.989 Error worker.1 worker.1 SEVERE *** ERROR *** identification_engine : RECLASSIFICATION_NOT_ALLOWED CI Reclassification not allowed from class: [cmdb_ci_linux_server] to [cmdb_ci_firewall_network]

05:36:33.998 Error worker.1 worker.1 SEVERE *** ERROR *** identification_engine : ABANDONED Too many other errors

05:36:34.019 Error worker.1 worker.1 SEVERE *** ERROR *** identification_engine : Detected error while processing payload from Manual Entry

05:36:34.021 Error worker.1 worker.1 SEVERE *** ERROR *** identification_engine : Input = {"items":[{"className":"cmdb_ci_firewall_network","values":{"discovery_source":"Manual Entry","dns_domain":"xxxxxxx","name":"xxxxxxx","serial_number":"xxxxxxxx","ip_address":"xxxxxxxxxxxxxx","model_id":"57737812db6d6b002fb4e3334a9619d1","sys_class_name":"cmdb_ci_firewall_network","dns_name":"ucq-isepa-p002.int.ucq.com.au","manufacturer":"c31d211bd5ca1900e432c0cf65a456d1"},"lookup":[{"className":"cmdb_ci_network_adapter","values":{"netmask":"255.255.255.0","mac_address":"00:50:56:92:7d:57","name":"eth0","ip_address":"10.14.2.100"}}],"related":[]}],"relations":[]}

05:36:34.022 Error worker.1 worker.1 SEVERE *** ERROR *** identification_engine : Output = {"items":[{"sysId":"Unknown","identifierEntrySysId":"556eb250c3400200d8d4bea192d3ae92","errors":[{"error":"RECLASSIFICATION_NOT_ALLOWED","message":"CI Reclassification not allowed from class: [cmdb_ci_linux_server] to [cmdb_ci_firewall_network]"},{"error":"ABANDONED","message":"Too many other errors"}],"identificationAttempts":[{"identifierName":"Hardware Rule","attemptResult":"SKIPPED","attributes":["asset_tag"],"searchOnTable":"cmdb_ci_hardware"},{"identifierName":"Hardware Rule","attemptResult":"NO_MATCH","attributes":["serial_number"],"searchOnTable":"cmdb_ci_hardware"},{"identifierName":"Hardware Rule","attemptResult":"MATCHED","attributes":["name"],"searchOnTable":"cmdb_ci_hardware"}]}],"relations":[]}

Re: CIsco ISE Discovery

Marek10 — Fri, 11 Jan 2019 11:41:22 GMT

Great video Doug! Many thanks!

However, the UI looks quite ancient - what release was that?

Re: CIsco ISE Discovery

nskpkrishsenthi — Thu, 26 Oct 2023 02:33:02 GMT

Are you able to discovery Cisco ISE using SNMP

Re: CIsco ISE Discovery

sourabh5190 — Tue, 04 Feb 2025 09:29:39 GMT

Hello @Insomaniac ,

We wanted to check with you how did you allow/add mid server IP in ISE devices ACL. While working with our Network team they informed us that, "To allow SNMP communication with ISE device, we need SNMP Engine ID of ServiceNow". Could you please let us know how did you/network team allowed polling from ServiceNow? Where can we find the Engine ID?

Thanks in Advance.

Thanks,

Sourabh