ISE TACACS+ Performance number for AD

[dngore]

Hi,

ISE Performance & Scale document provides TACACS+ PAP & CHAP authentication performance number (4884/sec & 4961/sec) considering internal database. 

But normally AD is used as authentication database at customer network.

Hence would like to know performance number for AD as database.

Do we have that?

[Mohammed al Baqari]

I think this will be subject to AD server more that ISE hence you need to
look at QD specs.

[dngore]

It relates to ISE as it will communicate/transact with AD for authentication verification. Performance document specifies auth/sec data for RADIUS using AD. So expecting same for TACACS+ 

[Mohammed al Baqari]

That's true. I remember now that in one of cisco live events which I
attended related to ISE that performance for tacacs isn't listed because
they don't execpt high transaction rate for tacacs because its only related
to device admin while radius is for endpoint

[kthiruve · Accepted solution]

Yes. We use the same AD connector for RADIUS and TACACS. Though we dont have numbers for AD authentication using TACACS, you can safely assume that the numbers would be somewhat similar to what you see in RADIUS.