cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

386
Views
0
Helpful
1
Replies
acontes
Beginner

Evaluating Authorization Policy - High Delay

Hi,

to authenticate wireless users we use an ldap directory. In the prime time, between 8am and 12am when there is a lot of movement on the floors, we are faced with a high delay 10-20 seconds) in step "Evaluating Authorization Policy" on ISE resulting in a lot of failed logins.

There is no big authorization done, just checking if the user is in a specific group on the ldap server. Thats all. But we are checking 10 different groups.

Any ideas how to optimize this?

ISE is 1.2.1 Patch 8.

Wireless Controller is 5760 with 3.4

1 REPLY 1
nspasov
Cisco Employee

Hi there. I have a couple of questions:

1. What type of ISE servers are you using? Virtual or physical?

2. If the servers are virtual, can you confirm that:

2.1. You have the correct resources (Memory, CPU and thick provisioned disk) assigned to them

2.2. The resources are reserved in VMware

3. How many concurrent endpoints do you have authenticating against ISE

4. What type of deployment do you have (distributed, 2-nodes, etc)

5. Provide the full version of your WLC

Thank you for rating helpful posts!

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars



Did you miss a previous ISE webinar?

CiscoISE YouTube Channel