Cisco ACS database tuning

[Shobith K]

Hi

I would like to know best ways for tuning Cisco ACS database.  Now the database size has grown up and causing performance problems.  We are running Cisco ACS 4.2 on Windows server 2003 R3. SP2

What is the best possible way to tune Cisco ACS performance.

What is the best possible design consideration in deploying 6 ACS servers and in replicating mode? Can i use one database for all the 6 ACS servers. Is this feasible?

Any docs which talks about all these would be helpful.

Thanks in advance.

SK

[mauzamor]

Hi there,

About the database size growing issue, I have seen issue similar in the past and could be related to the Service Control option, make sure it's configured Low. This option is located under System Configuration.

Regards the replication issue, in the past I have seen even 7 servers in cascade replicating fine, although depending on different factors like distance, devices in between, amount of data, etc. The replication may flow may get affected. I am not sure which will be your requierements but using one server to replicate the information to the other units is a good option, I prefer this one than cascade replication.

[Shobith K]

Thanks for the reply.  The database size is because of the number of leap passwords added.  We have retail estate which has 10 thousands of devices connected.  Current database size is around 1.6GB and growing.

[Tarik Admani]

Outside of manually deleting the logs files, and making sure that the service control is not set to full. Your best bet would be consider upgrading (purchasing) ACS 5.x. You can set purge cycles in order to have this automated:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/user/guide/viewer_sys_ops.html

Tarik Admani
*Please rate helpful posts*