12-20-2016 09:01 AM
Hi,
I am working at optimizing an ISE deployment at a Customer's site.
The Customer has ISE 2.0 patch 3 deployed with 2 Admin/M&T and 6 PSNs. I have already pointed out that Cisco recommends a maximum of 5 PSNs for medium size deployment .
However I am seeing an alarm "High Load Average" for the Admin Node even though the system health looks good with CPU and memory both below 25%. and 3K profiled endpoints.
Is it possible that this alarm could be a result of an extra 6th PSN ?
I'll also be opening a TAC case for this
Thanks,
Utkarsh
12-20-2016 09:50 AM
This is kind of a false positive. Your load could be 3% and you'll get this message if your daily average is 2%. Basically it means that the average load percentage has increased due to activity (Authentication, Posture, etc.). It does not mean that the ISE Nodes are working hard or are over-stressed.
This "alert" will let you know if there is increased activity on your network. Most of the time it is due to more authentications or the addition of other services (TACACS+, etc.). If there is an open guest network with a simple portal, then this can also be the cause as people use that.
Charles Moreton
12-22-2016 05:45 AM
Thanks Charles.
It looks to be false positive.
I have provided the detailed logs to the TAC engineer.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide