ISE & TCACS+

[DAVIDE LORENZETTI]

Hi,

if I use ISE VM exclusively as a TACACS+ server, how should the VM sizing be done?

Thx

[balaji.bandi]

Look below guide :

https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html

[DAVIDE LORENZETTI]

from the guide:

Different Types of Cisco ISE Deployment

Small Deployment
All ISE personas (PAN + MnT + PSN + pxGrid) on the same appliance or VM instances.

from install guide:

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/install_guide/b_ise_InstallationGuide31.pdf
Table 4: OVA Template Reservation
OVA Template Type:
- Number of CPUs: 16
- CPU Reservation (In MHz): 16,000
- Memory (In GB): 32

Should i allocate 16 CPU and 32 GByte of RAM as a full installation (all ISE personas) even if I only use TACACS?

Are all these resources needed for tacacs functionality only?

[balaji.bandi]

Look at the model : TACACS+ Performance

how many devices , TACACS request

that spec you mentioned should work.

[DAVIDE LORENZETTI]

400 devices, the "Small Deployment" sizing seems oversized to me

[balaji.bandi]

ISE have only small / medium and large

If this is Only for device Access, you like to save money too.. if i were you i use Freeradius ( simple Linux box no License cost)

[DAVIDE LORENZETTI]

can i use eval sizing if i only use TACACS + functionality?

OVA Template Type Evaluation:
- Number of CPUs: 4
- Memory (In GB): 16