ACS - 1113 appliance response is too slow

[Richard.Jeff]

Hi ,

We are having a Cisco ACS 1113 appliance running with the version 4.2 .

We are seing high cpu load intermitently , The ACS web page is getting loaded too slow also the users are facing authentication issue with an error permission denied ..

Please find the attached screen shots .

Waiting to hear from you all . Thanks in advance ..

[Nicolas Darchis]

Can you verify the amount of authentication attempts at the time of the issue ?

Can you also double check on the traffic that the ACS is getting at that time ? Any ARP storm or something ?

Regards,

Nicolas

[Richard.Jeff]

Hi Nicholas ,

I am new to this product so please guide me how to check the

1> Total authentication count at a particular time

2> Total traffic hitting to the ACS

At the time of issue the CPU load is going to 100% even though we are able to ping the device with <1ms .

Is there any option / document to troubleshoot on hardware level .

Thanks in Advance .....

Regards,

Richard

[Nicolas Darchis]

Check the reports on ACS web page afterwards to see if there was many authentication success or failure at the time of the 100% cpu.

Take a sniffer trace by spanning the switchport where ACS is connected. IT will give you an idea of the traffic that is hammering the ACS.

That's 2 easy ways.

Nicolas

[Richard.Jeff]

Hi ,

After resetting the switch port the cpu utilization came down. But when the user is trying to authenticate the screen hangs for a while and throw an error % Authentication Failed.

Regards,

Richard

[Nicolas Darchis]

We still need what was asked previously. We need to understand what is loading acs