CUCM BE6K: Maximum Number of LDAP Accounts

[Steffen Wentzel]

Hello all,

we are currently deploying a CUCM BE6000 for a customer. We only have a couple of active users, however the customer AD is pretty big (huge, actually, >40k entries).

We would like to sync CUCM to AD. It would be best to sync all users (even if 99% are not CUCM enabled) to have a complete corporate directory available.

What's the limit in terms of number of AD accounts (even if not CUCM enabled) in a BE6000 system?

Cisco SRND states:

The maximum number of users that a Unified CM cluster can handle is limited by the maximum size of the internal configuration database that gets replicated between the cluster members. The maximum number of users that can be configured or synchronized is 160,000. With more than 80,000 users the maximum number of LDAP synchronization agreements is limited to 10, while with less than 80,000 users the total number of LDAP synchronization agreements is limited to 20.

Do these numbers also apply to BE6K installations?

[Vaijanath Sonvane · Accepted solution]

Hi,

Below notes are from same SRND:

Cisco supports the synchronization of user accounts up to the limit mentioned in SRND, but Unified CM has no enforced limit on the number of accounts that may be added to the system. Cisco recommends limiting the number of users to twice the supported number of endpoints. 

Cisco recommends using the control mechanisms described in SRND to minimize the number of user accounts imported, regardless of the LDAP database size. This will improve the speed of the first and subsequent periodic synchronizations and will also improve manageability of the user accounts. Synchronizing more user accounts can lead to starvation of disk space, slower database performance, and longer upgrade times.

[Steffen Wentzel]

Thanks, that's actually really helpful!