Spurgeon
We tend to load balance a whole bunch of things, but I would really be
concerned about load balancing AD servers because the VS would itself add some
latency. Not saying it wouldn’t work, just my own experience.
I would rather rely on dedicating AD servers to some “site” and use the
I have no answer for dev testing of AD performance. However, I do have some
links to Cisco info on ISE scaling and deployment that I saved for future ref.
Here they are in case they may be of use:
1. “2019 How Cisco Deployed ISE”
So we are running ISE which is backended by Active Directory. We have been
adding sections of campus to wireless authentication of eduroam and things
seemed fine with no issues that we could see. When we finally added the last
bit of our environment on Friday, this were going great but then
Joseph,
Which version of ISE?
Unlike ACS, ISE can use a whitelist to check only domains which you want it to
look and such.
There are several dashboards on the AD side that will let you know the latency,
and reports in ISE as well as to how long it takes to fetch a user.
And using Cacti or
We are currently running 2.7 but have 3.0 on a test box. One of my coworkers
had made some graphs for info ISE provides about latency, but we are still
learning to read them to figure out what might be “normal”.
Thanks,
Joseph B.
From: The EDUCAUSE Wireless Issues Community Group Listserv
I’ve read all those many times, and unfortunately they are great at helping you
to expand ISE but not what feeds it. We have done several things, though,
mentioned in those documents since our incent.
Thanks,
Joseph B.
From: The EDUCAUSE Wireless Issues Community Group Listserv
on behalf of
