cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

502
Views
0
Helpful
2
Replies
Highlighted
Cisco Employee

Source for ISE Performance &Scale

Hi Experts,

Does anyone please advise me about the values in the DOC-68347(ISE Performance & Scale)?

My customer asked me about the values of PEAP (MSCHAPv2) auth/sec in ISE 2.3 RADIUS Performance.

Is it theoretical value of software/hardware of SNS or values verified by internal tests?

Thank you in advance.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Source for ISE Performance &Scale

HI Yuma,

Understand your concern. This is based on our internal validation and not a theoretical value.

Thanks

Krishnan

View solution in original post

2 REPLIES 2
Cisco Employee

Re: Source for ISE Performance &Scale

HI Yuma,

Understand your concern. This is based on our internal validation and not a theoretical value.

Thanks

Krishnan

View solution in original post

Advocate

Re: Source for ISE Performance &Scale

Krishnan is correct.  We certainly do validate performance and scale across the different appliances.  I recently raised the gap in missing MAB results and hope to have updates for those soon for ISE 2.4 (usually in the hundreds of auths/sec per PSN).  We perform testing to understand max values BEFORE any drops or excessive resource utilization for a given feature or method for a given platform.  We separately test scale and performance of an entire configuration which matches supported deployment models for multiple services on multiple nodes.  Other perf/scale testing is done, but most fall into the category of individual feature versus overall deployment scale.

Another factor to consider is negative inputs.  In most production deployments a node is running EAP authentication (possibly for multiple protocols) for a wide range of client types.  Often the noise (bad auth inputs) can be extremely high and will have a significant impact on positive auth rate.