Solved

Virtual NAC appliance throttling tasks like crazy

  • 30 September 2020
  • 8 replies
  • 62 views

Hi,

We have 2 virtual NAC appliances with identical configuration (I’ve attached some info).

On busy moments, we get a lot of complaints of users not being able to log on to random laptops (using identifi wi-fi and the nac with AD/nps for auth)

so I did some digging in (many) logs and status pages of the nacs.

I noticed that on one device the “UpdateService Thread Pool” and “UpdateService  Scheduled Thread Pool” builds up about 25.000 throttled tasks per day. The screenshot I’ve attached shows the state 2 hrs after a “nacctl restart” command (this seems to reset it to 0)

On the other NAC, this value is most of the time very low and doesn’t throttle..

I notice the complaints are less when the “nacctl restart” command cleared the queue, but this is no solution..

anyone has an idea?

thx

 

 

icon

Best answer by Miguel-Angel RODRIGUEZ-GARCIA 30 September 2020, 12:37

Dani,

You run the version 8.1 and the current release is 8.5.

There are so many enhancements and bug fixes released since 8.1.

The risk is to chase a known issue and to lose a lot of time in debugging.

Wouldn’t be an upgrade to 8.5 an option?

Mig

View original

8 replies

Userlevel 6
Badge +1

Dani,

You run the version 8.1 and the current release is 8.5.

There are so many enhancements and bug fixes released since 8.1.

The risk is to chase a known issue and to lose a lot of time in debugging.

Wouldn’t be an upgrade to 8.5 an option?

Mig

Userlevel 3

Miguel is correct.  I believe this is a bug fixed in a later version of XMC, I had a customer with the same type of issue with an earlier version of XMC.

Yes, that would be the prefered choice.

Upgrading the NAC means upgrading Netsight/EMC as well I suppose?

Can I go straight from 8.1 to 8.5.1.60?

 

 

 

Userlevel 6
Badge +1

Dani,

 

Prefered choice is 8.5.

 

Here from release notes:

Extreme Management Center 8.5.0 supports upgrades from Extreme

Management Center version 8.3.x or 8.4.x. If you are upgrading from version 8.2

or earlier of NetSight/Extreme Management Center, you must perform an

intermediate upgrade. For example, if you are upgrading from NetSight 8.1, you

must first upgrade to the latest Extreme Management Center 8.3 or 8.4 release,

then to 8.5.0.

 

Mig

One more question..

How about licensing? If the 8.1 has a valid license, it stays in place after the upgrade?

Userlevel 6
Badge +1

Dani,

If I remember well

You’ll start with a 90 days trial and will have to upgrade your licence via the support portal at no cost.

The issue is the licence format that has changed in 8.5.

Mig

Userlevel 6
Badge

Hello Dani,

in parallel to the update of XMC/NAC you can check your NAC behaviour with the command “nacstatus” on the NAC gateway with the throttled events. Have an eye to the switches with lost contact or other snmp problems (“ Switch Dynamic Information” table in nacstatus). If you have an great amount of devices which can’t contact by nac this can be the cause for the mentioned problem.

Best regards

Stephan

Userlevel 6

Hello,

 

You can look at the threads to see what the threads are currently active doing to try and figure out if there is a performance issue and what process it resolves around.

 

I would suspect reverse DNS lookups for IP resolution. 

 

Go to status → threads and look for “update” 

The thread output hopefully will have a “hint” about what it’s doing. You will probably see all threads doing the same thing. 

 

Thanks

-Ryan

Reply