10-22-2019 06:08 PM
Hi All,
We're working on a ISE deployment setup which is integrated with Meraki APs and Firepower. Interim accounting updates have been configured on the Merakis, for the user-IP mapping for the firewall policies.
As per Meraki behaviour, the first interim packet comes in only after 5 minutes, which means no user-IP mappings for 5 minutes. This was further discussed with the Meraki BU, they have asked it to be brought down to 60 seconds. This would be mean, ISE would be receiving the below count of messages:
300 AP's x 25 users each = 7,500 messages/packets every 60 seconds, or possibly more if the users are more than 25.
Therefore the question is, if ISE is able to withstand those many Accounting packets in a second? This is an ISE 2.4 Medium VM.
Platform: ISE-VM-K9 Version: 2.4.0.357 Patch: 9 Disk: 644 GB CPU_Cores: 16 RAM: 63 GB
Solved! Go to Solution.
10-22-2019 06:21 PM
The issue has been addressed on Meraki MR with version 26.6. See:
Customer can try beta or wait for GA.
10-22-2019 06:21 PM
The issue has been addressed on Meraki MR with version 26.6. See:
Customer can try beta or wait for GA.
10-24-2019 06:22 AM
Thank you for the update.
Will look forward to that update.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide