pxgrid test

Synopsis

netapi ise pxgrid test

Description

Tests the pxGrid connection by verifying certificate authentication and account activation status.

Examples

Successful Test

netapi ise pxgrid test

Output:

pxGrid connection successful
Host: ppan.inside.domusdigitalis.dev:8910
Client: netapi-pxgrid

Failed Test

pxGrid connection failed or account not enabled

What It Checks

  1. Certificate validity - Client cert is valid and trusted

  2. Network connectivity - Port 8910 is reachable

  3. Account status - Account is ENABLED (not PENDING or DISABLED)

Troubleshooting

Connection Timeout

# Verify port is open
nc -zv ppan.inside.domusdigitalis.dev 8910

# Check firewall rules
sudo iptables -L -n | grep 8910

SSL Errors

# Verify certificate chain
openssl s_client -connect ppan.inside.domusdigitalis.dev:8910 \
  -cert ~/.secrets/certs/d000/ise/pxgrid-client.cer \
  -key ~/.secrets/certs/d000/ise/pxgrid-client.key \
  -CAfile ~/.secrets/certs/d000/ise/ROOT-CA.crt

Account Not Enabled

# Check account state
netapi ise pxgrid activate

# If PENDING, approve in ISE GUI

See Also