cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

ACS Performance & Scale

6055
Views
3
Helpful
0
Comments


ACS Deployment Scale & Limits

Attribute

System Maximum / Limits

ACS Instances

22

Hosts

200,000 for 35xx appliance

150,000 for other appliances

Users

400,000 for 35xx appliance

300,000 for other appliances

Identity Groups1,000
Active Directory Group Retrieval1,500

Network Devices

150,000 on 35xx appliance

100,000 on other appliances

Network Device Groups (NDGs) Unique, Top-Levels

12

Network Device Group Hierarchical Levels

6

Network Device Group Locations10,000
Network Device Group Device Types350
Services25
Authorization Rules320
Conditions8
Authorization Profile600
Service Selection Policy (SSP)50
Network Conditions (NARs)3,000
ACS Admins

50

9 static roles

dACLs600 dACL with 100 ACEs each

ACS Hardware Platforms

VMs must have the equivalent of the hardware platforms or better.

VM resources must be dedicated to ACS and not shared with other VMs.

Hardware Platform

ACS

Processor

RAM

Hard Disk

RAID

Ethernet NIC

EoS

Cisco SNS 35955.8.1Dual socket Intel Xeon E5-2640 v3 series CPU @ 2.60GHz, 8 total cores, 8*2 total threads64GB

4 x 600-GB 10k SAS HDDs

(1200 GB total)

RAID 106 x Integrated Gigabit NICs-

Cisco SNS 3515

5.8.1

Single socket Intel Xeon E5-2620 v3 series CPU @ 2.40GHz, 6 total cores, 6*2 total threads16GB

1 x 600-GB 10k SAS HDD

(600 GB total)

No6 x Integrated Gigabit NICs-

Cisco SNS-3495

(Large UCS)

5.8.x

5.7.x

5.6.x

5.5.x

Cisco UCS C220 M3

2 x Quad-Core

Intel Xeon CPU E5-2609

@ 2.40 GHz, 8 total cores, 8 total threads

32 GB2 x 600-GB disksRAID 0+14 GE network interfaces07-Oct-2016

Cisco SNS-3415

(Small UCS)

5.8.x

5.7.x

5.6.x

5.5.x

5.4.x

Cisco UCS C220 M3

Single socket Intel E5-2609 2.4Ghz CPU 4 total cores, 4 total threads

16 GB1 x 600-GB diskEmbedded Software RAID 04 GE network interfaces07-Oct-2016

Cisco 1121 Secure Access Control System Hardware (CSACS-1121)

5.8.x

5.7.x

5.6.x

5.5.x

5.4.x

5.3.x

5.2.x

5.1.x

Intel Core 2 Duo 2.4-GHz processor with an 800-MHz front side bus (FSB) and 2 MB of Layer 2 cache.4GB SDRAM2 x 250-GB SATA disks-4 x 1 GB network interface27-Aug-2013
Cisco 1120 Secure Access Control System Hardware (CSACS-1120)

5.3.x

5.2.x

5.1.x

5.0.x

4.2

??????

Cisco Secure ACS-VM (VMware)


Supported Virtual Environments.

5.8.1

5.8.x

5.7.x

5.6.x

5.5.x

5.4.x

5.3.x

5.2.x

5.1.x

Minimum:

2 CPUs (dual CPU, Xeon, Core2 Duo or 2 single CPUs)

4GB minimum

64 GB maximum

60GB minimum

1.2TB maximum

NIC—1 GB NIC interface required (You can install up to 4 NICs.)?

ACS TACACS+ Performance

SNS-34xx and 35xx appliance performance was done with ACS 5.8 patch 1 as a dedicated authentication node.

Recommend dedicating resources for VM performance equivalent to hardware.

Authorization

Method

Identity

Store

Cisco SNS-3415

(Auth/Second)

Cisco SNS-3495

(Auth/Second)

Cisco SNS-3515

(Auth/Second)

Cisco SNS-3595

(Auth/Second)

T+ PAP

Internal

1114

1869

2215

2563

T+ CHAP

Internal

1116

1872

2328

2472

Accounting

1234

1226

1646

1956

Authorization(session)

900

1961

2726

2710

Ms-chap

1138

1972

2456

2580

ACS RADIUS Performance

SNS-34xx and 35xx appliance performance was done with ACS 5.8 patch 1 as a dedicated authentication node.

Recommend dedicating resources for VM performance equivalent to hardware.

Authentication

      Method

Identity

Store

Cisco SNS-3415

(Auth / second)

Cisco SNS-3495

(Auth/ second)

Cisco SNS-3515

(Auth/ second)

Cisco SNS-3595

(Auth / second)

PEAP (MSCHAPv2)

Internal

1214

1876

1203

3869

PEAP (MSCHAPv2)

Active Directory

162

241

201

354

PAP

Internal

1310

1911

2857

3891

PAP

Active Directory

549

574

622

784

EAP-TLS

Internal

935

1024

963

1998

EAP-FAST (MSCHAPv2)

Internal

1011

1263

1773

2435

EAP-FAST (MSCHAPv2)

Active Directory

224

368

433

586

EAP-FAST (GTC)

Internal

1001

1223

1689

2345

EAP-FAST (GTC)

Active Directory

221

376

414

510