TACACS+ performance

[pmesjar]

Hi team,

15k RADIUS concurrent sessions and around 2k of TPS, quoting 2 ISE medium appliances for PAN+MnT+PSN and 2 dedicated small appliances for T+. I would like to doublecheck this is correct, because community link has two key sentences around TACACS+ performance:

Platform performance specs are for a dedicated PSN.

PAN and MNT nodes are deployed as separate node(s).

Do we really require dedicated PAN+MnT with separate PSN to achieve TPS scale as listed under TACACS+ Performance table in the ISE scale community link or simply dedicating nodes for T+ functionality suffices?

Thanks.

/Peter

[Timothy Abbott · Accepted solution]

Hi,

Yes, they must be dedicated to achieve those performance numbers.  The reason is that MnT is the bottleneck because it is I/O intensive on the hard disk.

Regards,

-Tim