topic Cisco ISE - High Load on Backup Server in Network Access Control

Cisco ISE - High Load on Backup Server

Matthew Martin — Fri, 21 Feb 2020 18:42:04 GMT

Hello All,

ISE v2.0.0.306

I have been noticing that our Main ISE Server, which handles 99% of the authentication requests shows a very low CPU utilization, and mid-level Memory usage. Then, looking at our backup ISE Server, it's constantly showing very high CPU usage, about 99% use all the time.

I'm attaching a screenshots below showing the CPU usage, so maybe someone could shed some light on why this looks this way? And I'm wondering how its even possible for the backup ISE server to be running at 99% CPU at all times...?

In the screenshot below, the ISE-Exton is the main ISE server and "atl" is the backup/failover server:

I'm also attaching the exported PDF, which shows the High load warning for the ISE-atl server.

Any thoughts or suggestions would be greatly appreciated.!

Thanks in Advance,

Matt

Re: Cisco ISE - High Load on Backup Server

Marvin Rhoads — Wed, 20 Dec 2017 14:12:44 GMT

That's definitely out of the ordinary.

Have you applied any of the ISE 2.0 patches to your deployment? (Patch 5 is the latest on the release.) I don't see any published bugs that would point to that specific symptom but it's something the TAC would want to know should you open a case with them.

Re: Cisco ISE - High Load on Backup Server

ajc — Wed, 20 Dec 2017 18:21:45 GMT

My 2 cents, we have the same issue here. Apparently that is another bug on 2.x version. The reality is that Primary and Secondary PAN/MNT running 2.x should be installed on 3595 servers, it does not work properly on 3495 appliances BUT we moved both personas to 3595 and still getting same error. We are still on evaluation mode regarding this error.

thanks

Re: Cisco ISE - High Load on Backup Server

Matthew Martin — Wed, 20 Dec 2017 20:22:54 GMT

Hey Marvin, thanks for the reply.

Yes, we have installed Patches: 2, 3 and 4, according to the Server Information pop-up window in the ISE GUI.

Server Information:

-Matt

Re: Cisco ISE - High Load on Backup Server

Matthew Martin — Wed, 20 Dec 2017 20:25:42 GMT

Hey Abraham, thanks for the reply.

I assume you're referring to the VMWare servers that the ISE VMs are running on? If so, I'll have to check with our VM admin. But, I believe their running on a "UCS Cisco6120XP"...

Thanks,
Matt