Painful slowness during ISE Labs

Christian and INE Team,
I'm not sure you guys use your own racks, so I don't know if you realize just how bad the experience is when trying to do the Identity Management section. Rest assured, it's pretty bad.
Tasks that should take me 10-15 minutes, take 1 to 1.5 hours!

Check out this video of me trying to complete the 2 dACLs in the ISE Central Web Authentication lab. It takes almost 12 minutes to complete 2 dACLs! On my own VM, I can do that in 1 minutes. I'd use my own VM more often, but I don't have switches at home and most of these labs require functional 802.1x. Plus…as people paying for access to the racks, we expect that things work at least somewhat well. I understand some slowness, but this is crazy don't you think?

Here's the link:


-Dan=

Comments

  • Hi,

    I had similar experience but not so bad. For me usually closing VM and reopening again helped. But I agree it isn't a 'speed demon'

    regards

    Hubert

  • This post should be under Rack Rentals > CCIE Security section. Thanks.

  • Dan,
    I'm personally looking into this issue right now with our development team. It's not easy to pin down as not everyone has the problem. Here is a speed test that I just did from my home to the SC racks.



    That test was in Firefox (Ubuntu 12.10).

    I see that you're coming from South Korea using Safari correct? Let me try to grab a Mac and test the connection with Safari. Also I'll induce the same 200 to 225ms latency.

    --
    Brian Dennis, CCIEx5 #2210 (R&S/ISP-Dial/Security/SP/Voice)
    [email protected]

    INE, Inc.
    http://www.INE.com


    -----Original Message-----
    From: [email protected] [mailto:[email protected]] On Behalf Of artagel
    Sent: Wednesday, October 02, 2013 8:59 AM
    To: Brian Dennis
    Subject: [CCIE Sec] Painful slowness during ISE Labs

    Christian and INE Team, I'm not sure you guys use your own racks, so I don't know if you realize just how bad the experience is when trying to do the Identity Management section. Rest assured, it's pretty bad. Tasks that should take me 10-15 minutes, take 1 to 1.5 hours! Check out this video of me trying to complete the 2 dACLs in the ISE Central Web Authentication lab. It takes almost 12 minutes to complete 2 dACLs! On my own VM, I can do that in 1 minutes. I'd use my own VM more often, but I don't have switches at home and most of these labs require functional 802.1x. Plus…as people paying for access to the racks, we expect that things work at least somewhat well. I understand some slowness, but this is crazy don't you think? Here's the link: -Dan=


    INE - The Industry Leader in CCIE Preparation
    http://www.INE.com

    Subscription information may be found at:
    http://www.ieoc.com/forums/ForumSubscriptions.aspx
  • Hi Dennis,
    Thanks for the reply.
    So to be clear, if i do what you did in your speed test, I also have pretty much the same result. The speed doesn't start bogging down until I try to do something in ISE.
    If I do things like cisco VPN, the machine is usually fine. If I do ACS labs, I can usually click through everything pretty quickly, it's not lightning fast, but I'm only waiting 1 or 2 seconds per click, which is more than fine.
    It's when I use ISE…. That's when I have those long delays, each and every time.

    As Hubert said, sometimes I'll reboot the test-pc, and it helps a little bit, but the problem comes back very quickly.
    I often even keep ISE open on both the server and the test pc because if the test-pc is stuck, the server can access it and make the change I need. There are certain sections that don't present properly on the server, so I have to use the test-pc for those. I find that it bogs down the most when I am doing things with complicated sub-menu's. Like building conditions in authorization/authentication areas.

    I am in South Korea, yes. My internet connection is actually very good, I don't typically have issues with speed to the states. My latency is ~200ms as you suggested. I have tried doing the labs connected via vyprvpn to LA, with no improvement.

    I will try changing to a different browser tonight to see if that makes any difference.
    Thanks of taking a look at this.
    -Dan
    On Oct 3, 2013, at 3:27 AM, "Brian Dennis" wrote:

    > Dan, I'm personally looking into this issue right now with our development team. It's not easy to pin down as not everyone has the problem. Here is a speed test that I just did from my home to the SC racks. That test was in Firefox (Ubuntu 12.10). I see that you're coming from South Korea using Safari correct? Let me try to grab a Mac and test the connection with Safari. Also I'll induce the same 200 to 225ms latency. -- Brian Dennis, CCIEx5 #2210 (R&S/ISP-Dial/Security/SP/Voice) [email protected] INE, Inc. http://www.INE.com -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of artagel Sent: Wednesday, October 02, 2013 8:59 AM To: Brian Dennis Subject: [CCIE Sec] Painful slowness during ISE Labs Christian and INE Team, I'm not sure you guys use your own racks, so I don't know if you realize just how bad the experience is when trying to do the Identity Management section. Rest assured, it's pretty bad. Tasks that should take me 10-15 minutes, take 1 to 1.5 hours! Check out this video of me trying to complete the 2 dACLs in the ISE Central Web Authentication lab. It takes almost 12 minutes to complete 2 dACLs! On my own VM, I can do that in 1 minutes. I'd use my own VM more often, but I don't have switches at home and most of these labs require functional 802.1x. Plus…as people paying for access to the racks, we expect that things work at least somewhat well. I understand some slowness, but this is crazy don't you think? Here's the link: -Dan= INE - The Industry Leader in CCIE Preparation http://www.INE.com Subscription information may be found at: http://www.ieoc.com/forums/ForumSubscriptions.aspx
    >
    >
    > INE - The Industry Leader in CCIE Preparation

    > http://www.INE.com

    >

    > Subscription information may be found at:

    > http://www.ieoc.com/forums/ForumSubscriptions.aspx
  • Thanks.  That makes it easier to isolate.  If you have an issue like this in the future that you 
    want escalated you can email me directly.  The Support Manager reports directly to me but 
    sometimes it's easier if I get involved early on.

  • Also can you let me know what base configurations you load and if the ISE server is slow from the very beginning or after you've configured it?  I'm connected to SC Rack 1 now and it's not slow for me from testpc-a with a base configuration loaded.  I've check the ESXi server and the machine isn't limited in CPU and is only using 35% of the allocated RAM.

  • Thanks Dennis for the support.

    I'm probably going to try to grab some switches form the warehouse today and just run through the labs on my VM to make sure i understood everything, but I have a session tonight and I'll try one of the ISE tasks and let you know.

     

    I go to configuration and load the only template that is available under the Identity Management section.

    Afterward I load the ASA manually.

    I usually do the loading right away, so I don't know if its slow initially or not.  I notice that the slowness gradually gets worse, so logging in, etc is ok, but once I do 1 or 2 different things it gets slow, then it might work decently again for 1 thing and then slow down again.

    The last few days I've mostly been on Rack 4, but I was on Rack 7 last night when I took the video, both were the same for me.

    -Dan

Sign In or Register to comment.