topic Re: Cisco ISE authentication per Second in Network Access Control

Cisco ISE authentication per Second

ReFeeL — Fri, 21 Feb 2020 18:57:13 GMT

In document show 485 auths/second fro SNS-3595. How I can monitor this on Cisco ISE GUI or CLI

Re: Cisco ISE authentication per Second

Marvin Rhoads — Sun, 03 Jun 2018 13:38:19 GMT

I don't believe you can get that exact statistic but you can pull average transactions per second using "application configure ise" from the cli and choosing option 12. You can then copy the files off box using scp or ftp to examine them.

ise-new/admin# application configure ise

Selection configuration option
[1]Reset M&T Session Database
[2]Rebuild M&T Unusable Indexes
[3]Purge M&T Operational Data
[4]Reset M&T Database
[5]Refresh Database Statistics
[6]Display Profiler Statistics
[7]Export Internal CA Store
[8]Import Internal CA Store
[9]Create Missing Config Indexes
[10]Create Missing M&T Indexes
[11]Enable/Disable ACS Migration
[12]Generate Daily KPM Stats
[13]Generate KPM Stats for last 8 Weeks
[14]Enable/Disable Counter Attribute Collection
[15]View Admin Users
[16]Get all Endpoints
[17]Enable/Disable Wifi Setup
[18]Reset Config Wifi Setup
[19]Establish Trust with controller
[20]Reset Context Visibility
[21]Synchronize Context Visibility With Database
[22]Generate Heap Dump
[23]Generate Thread Dump
[24]Force Backup Cancellation
[0]Exit

12
You are about to generate Daily KPM (Key Performance Metrics).
  % Warning  Generating KPM stats may impact ISE performance during the generation of the report.It is suggested to run this report during non-peak hours and when not conflicting with other scheduled operations of ISE. 
Are you sure you want to proceed? y/n [n]: y
Starting to generate Daily KPM stats
Copying files to /localdisk
Completed generating daily KPM stats. You can find details in following files located under /localdisk
KPM_onboarding_results_31_MAY_2018.xls
KPM_trx_load_31_MAY_2018.xls

Some further discussion can be found here:

https://communities.cisco.com/thread/85005?start=0&tstart=0

Re: Cisco ISE authentication per Second

Arne Bier — Fri, 01 Jun 2018 05:45:24 GMT

Yes - as Marvin pointed out, that is one method. The ISE GUI also has a KPI report if you find that more accessible?

Re: Cisco ISE authentication per Second

Marvin Rhoads — Fri, 01 Jun 2018 05:47:14 GMT

@Arne Bier

Thanks - I had forgotten they added that in the GUI as well.

Re: Cisco ISE authentication per Second

ReFeeL — Fri, 08 Jun 2018 07:04:43 GMT

Thanks All

Re: Cisco ISE authentication per Second

Andrii Oliinyk — Thu, 17 Jun 2021 14:53:16 GMT

Hi Arne

in old SW (like 2.1) there is no GUI option, but CLI's one presents.

Re: Cisco ISE authentication per Second

Andrii Oliinyk — Thu, 17 Jun 2021 16:17:18 GMT

Marvin, Arne,

could u pls explain LOGGED TO MNT/HR column meaning (value for arbitrary interval 2845)?
I guess i understand RADIUS REQUESTS as number of AAA requests during interval (seems to be 1 hour), right? it's value 17915, but what is then LOGGED TO MNT/HR which value times less?

br andy

Re: Cisco ISE authentication per Second

Marcelo Morais — Thu, 17 Jun 2021 17:02:20 GMT

Hi @Andrii Oliinyk ,

Logged Time: time data is collected (data collected every 5 mins is aggregated hourly)
Server: Server Name in the deployment
RADIUS Requests Per Hr: number of RADIUS Requests per Hour for selected PSN
Logged To MnT Per Hr: number of such requests logged to MnT database for selected PSN
Noise Per Hr: calculated as difference between RADIUS Request per Hour and Logged to MnT per Hour
Suppression Per Hr: calculated as percentage of Noise w.r.t. (with respect to) RADIUS Request per Hour for selected PSN
Avg Load: average server load for selected server
Max Load: maximum server load for selected server
Avg Latency Per Request: average latency per RADIUS Requests for selected PSN
Avg TPS: average transactions per second calculated as number of RADIUS Requests served per second by PSN

Hope this helps !!

Re: Cisco ISE authentication per Second

Andrii Oliinyk — Thu, 17 Jun 2021 18:31:06 GMT

tnx Marcelo

why RADIUS Requests Per Hr: number of RADIUS Requests per Hour for selected PSN
Logged To MnT Per Hr: number of such requests logged to MnT database for selected PSN

r differ so much?

Re: Cisco ISE authentication per Second

Marcelo Morais — Thu, 17 Jun 2021 19:38:03 GMT

Hi @Andrii Oliinyk ,

the Noise per Hr and Suppression per Hr indicate that, the cause ... take a look at: Administration > System > Settings > Protocols > RADIUS > Suppression and Reports tab.

Hope this helps !!!

Re: Cisco ISE authentication per Second

Andrii Oliinyk — Fri, 18 Jun 2021 06:24:50 GMT

tnx Marcelo.

is it though expected to have Noise per Hr and Suppression per Hr empty in the report?

br andy

Re: Cisco ISE authentication per Second

Marcelo Morais — Fri, 18 Jun 2021 14:34:55 GMT

Hi @Andrii Oliinyk

if the RADIUS Requests Per Hr and Logged To MnT Per Hr are the same, then the Noise per Hr and Suppression per Hr are equal to 0.

For example, each line is a different Node:

PAN: 3rd line

MnT: 5th line

PSN: 1st line (example)

RADIUS Request/Hr: 6731
Logged to MnT/Hr: 6021
Noise/Hr: 710 (6731 - 6021)
Suppression/Hr: 10.55 (710/6731)

Note: I didn't remember to see an empty value !!!

Hope this helps !!!