ISE 2.0 TACACS+ sizing

[Istvan Segyik]

Dear Colleagues,

We have to size ISE for TACACS+. All together 20.000 network devices.

The customer is using 4 ACS clusters to handle this load at the moment.

Any sizing assistance would be useful.

Could anyone who is able to help contact me in unicast, please? I don't want to share customer details here.

Best regards,

Istvan

Istvan Segyik

Escalations Engineer, Security

CCIE Security #47531

Global Virtual Engineering

WW Partner Organization

Cisco Systems, Inc

*** private contact information removed by moderator

[kthiruve · Accepted solution]

Hi Istvan,

See here for general sizing guidance:  ISE 2.0 TACACS+ Deployment & Sizing Guidance.

RADIUS and TACACS+ are very different. Check Aaron's blog for the differences There are two different models described in the deployment sizing doc above.

For TACACS+ implementation, to determine the number of PSN’s for programmatic device administration model as discussed above, for simplicity you can replace an ACS server with a ISE PSN node.

For human device administration model, you can use the sample calculation used in device administration model  to determine the transactions per second (TPS) for command authorization and accounting for your environment.

I will be publishing the first draft of migration doc in a day or two. Please look out for more information

Thanks

Krishnan

[algoldst]

Hi Krishnan,

Could you please provide the definition of 'Programmatic' which is referred to in the link that is provided.

Thank you,

[kthiruve]

Hi Alex,

Programmatic model refers to device administration model using scripts. Larger customers will typically have scripts(programs) they use to login to the network device and perform management tasks. This method of using scripts for device administration is called as programattic model.

Programmatic model is described in my how to guide and the ACS to ISE Migration- Planning - VOD in

ACS to ISE Migration

Thanks

Krishnan

[algoldst]

Hi Krishnan,

Thank you! That's what I thought, but making an assumption could get you in trouble ;-)

Happy Holidays!