Slow output observed while executing GUI and CLI commands for TACACS Users

Slow output observed while executing GUI and CLI commands for TACACS Users

book

Article ID: CTX229213

calendar_today

Updated On:

Description

  • Access to NS management IP using TACAC user experiences slowness. It takes more time to load any command and get the out put.
  • Access to NS using 'nsroot' credential works fine.
  • Slow output is observed when logged in as external auth TACACS user.
  • Slow output is observed only if, rbaOnResponse is enabled.


 

Resolution

  • Run "set system parameter -rbaOnResponse disabled"
  • Now, 'sh system parameter' command shows:
RbaOnResponse: DISABLED NatPcbForceFlushLimit: 4294967295
NatPcbRstOnTimeout: DISABLED Timeout: 900
MaxClient: 20 LocalAuth: ENABLED
Restrictedtimeout: DISABLED
  • Disable it, to fix the issue. The desired response in obtained. 

Problem Cause

This is because, if rbaOnResponse is enabled, each entity of the output/response of the command is sent to the external auth server for authorization, and if it is authorized, it displays the output on CLI else it moves to the next entity. The slowness is introduced due to the latency of the external authentication server.

Issue/Introduction

Slow output observed while executing GUI and CLI commands for TACACS Users
Powered by Wolken Software