topic Re: References for ISE 2.x performance with 2960-X stacks in Network Access Control

References for ISE 2.x performance with 2960-X stacks

Eric Knudson — Wed, 10 Jan 2018 22:45:42 GMT

We’re assisting in an ISE migration from 1.4 to 2.1 on stacks of 2960-Xs, seems like we’re running into CPU performance issues on the 2960-Xs - just as a sanity check, are we successfully running ISE w/profiling on stacks of these switches?

Re: References for ISE 2.x performance with 2960-X stacks

hslai — Thu, 11 Jan 2018 00:18:57 GMT

Cisco Identity Services Engine Network Component Compatibility, Release 2.3 shows it so ISE profiling should work on that model of Cisco switches. Please follow it up with Cisco TAC and the switch platform team for issues specific to that platform.

Re: References for ISE 2.x performance with 2960-X stacks

joshhunter — Wed, 12 Jun 2019 21:39:18 GMT

Hello Eric, did you resolve this issue?

I have a customer with the same problem, configuration is okay, however the stack of 2960-x switches have started to have high CPU once .1x configuration is applied.

Process such as Auth Manger and CPU - EPM ACL PLUG-IN are very high.

Had a Cisco TAC case open for a couple of months now, it has gone to the Architecture team, they suspected memory leak, we keep sending outputs but so far no answer.

Re: References for ISE 2.x performance with 2960-X stacks

joshhunter — Fri, 04 Oct 2019 14:25:50 GMT

Bump - Anyone experience High CPU with 2960x Stacks and 802.1x configuration.
TAC Case raised since May 2019, but still no further progress.

Re: References for ISE 2.x performance with 2960-X stacks

Jason Kunst — Fri, 04 Oct 2019 14:29:36 GMT

I’d also recommend posting under the switching forum