topic Re: TACACS+ and RADIUS integrated node performance TPS in Network Access Control

TACACS+ and RADIUS integrated node performance TPS

hpretori — Wed, 01 Aug 2018 14:08:04 GMT

Dear all,

i have some old figures showing Transactions per second (TPS) for ISE2.0 running on a shared PAN/MnT.

A separate PSN running as integrated (i.e.TACACS and RADIUS running on one node). Hence we have two nodes (1x PANMnT and 1 x PSN (TACACSandRADIUS)

are there any figures or estimates for ISE2.4 and for that matter anything higher than v2.0?

regards

Henk

Re: TACACS+ and RADIUS integrated node performance TPS

Cory Peterson — Wed, 01 Aug 2018 14:42:04 GMT

Take a look at this document It talks about 2.2 - 2.4:

https://community.cisco.com/t5/security-documents/ise-performance-amp-scale/ta-p/3642148#toc-hId-58103769

Re: TACACS+ and RADIUS integrated node performance TPS

hpretori — Wed, 01 Aug 2018 15:56:26 GMT

hi Cory

have seen that already. It doesn't have what I need. (it has TACACS dedicated and RADIUS dedicated).

regards

Henk

Re: TACACS+ and RADIUS integrated node performance TPS

Cory Peterson — Wed, 01 Aug 2018 16:27:02 GMT

The number is very subjective and would land somewhere in the middle of the two numbers for RADIUS and TACACS. It is heavily based on the use cases around TACACS and if it is just human interaction or if they use any type or automation that will execute commands much more rapidly than a human.

Thomas has a really good post on it and has some calculations around the scale of TACACS and if you situation would do better with a dedicated or combined node approach.

https://community.cisco.com/t5/security-documents/ise-tacacs-deployment-sizing-guidance/ta-p/3612253