dc test

Synopsis

netapi ise dc test

Description

Validates Oracle TCPS connectivity to the ISE DataConnect database. This is the first command to run when setting up DataConnect - it confirms credentials, SSL configuration, and network reachability.

Options

This command has no options.

Use the global --format flag at the dc level for JSON/YAML output:

netapi ise dc --format json test

Sample Output

Success:

✓ Connected to ISE DataConnect (10.50.1.21:2484)

Failure (credentials):

✗ DataConnect connection failed: ORA-01017: invalid username/password; logon denied

Failure (SSL):

✗ DataConnect connection failed: [SSL: CERTIFICATE_VERIFY_FAILED]

Environment Variables

Variable Description Default

ISE_DATACONNECT_HOST

MnT node IP or hostname

(required)

ISE_DATACONNECT_PORT

Oracle TCPS port

2484

ISE_DATACONNECT_USER

DataConnect username

dataconnect

ISE_DATACONNECT_PASS

DataConnect password

(required)

ISE_DATACONNECT_SERVICE

Oracle service name

cpm10

ISE_DATACONNECT_CA

Path to MnT SSL certificate

(optional)

INSECURE

Skip SSL verification

false

Troubleshooting

ORA-01017: Invalid username/password

The dataconnect account may be locked after failed attempts.

Fix: ISE Admin GUI → Administration → System → Settings → Data Connect → toggle Off/On, set new password.

SSL Certificate Verify Failed

Extract the MnT node’s certificate:

# Extract cert (run once per environment)
CERT=~/.secrets/certs/<domain>/ise/dataconnect.crt
[ -f "$CERT" ] || {
  mkdir -p "$(dirname "$CERT")"
  echo | openssl s_client -connect <mnt-host>:2484 2>&1 | \
    sed -n '/BEGIN CERT/,/END CERT/p' > "$CERT"
}

# Set in your secrets
export ISE_DATACONNECT_CA="$CERT"

Connection Refused / Timeout

  1. Verify DataConnect is enabled: ISE GUI → Administration → System → Settings → Data Connect

  2. Check firewall allows port 2484 from your machine to the MnT node

  3. In distributed deployments, DataConnect runs on MnT, not PAN

See Also