Purpose
Command or Action
Optionally specifies the TCP port to use for LDAP messages
to the server. The range is from 1 to 65535, and the default
Example:
switch(config)# ldap-server host 10.10.1.1 rootDN
cn=manager,dc=acme,dc=com password Ur2Gd2BH
timeout 60
TCP port is the global value or 389 if a global value is not
configured. Also specifies the timeout interval for the server.
The range is from 1 to 60 seconds, and the default timeout
is the global value or 5 seconds if a global value is not
configured.
Displays the LDAP server configuration.
(Optional)
show ldap-server
Example:
Step 3
switch(config)# show ldap-server
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 4
switch(config)# copy running-config startup-config
Related Topics
LDAP Server Configuration Process
, on page 109
, on page 110
, on page 111
Configuring LDAP Server Groups
You can specify one or more remote AAA servers to authenticate users using server groups. All members of
a group must be configured to use LDAP. The servers are tried in the same order in which you configure
them.
You can configure these server groups at any time, but they take effect only when you apply them to an AAA
service.
Before you begin
Enable LDAP.
SUMMARY STEPS
1.
configure terminal
2.
[
no
]
aaa group server ldap group-name
3.
[
no
]
server
{
ipv4-address
|
ipv6-address
|
host-name
}
4.
(Optional) [
no
]
authentication
{
bind-first
[
append-with-baseDN DNstring
] |
compare
[
password-attribute password
]}
5.
(Optional) [
no
]
enable user-server-group
6.
(Optional) [
no
]
enable Cert-DN-match
7.
(Optional) [
no
]
use-vrf vrf-name
8.
exit
9.
(Optional)
show ldap-server groups
10.
(Optional)
copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
113
Configuring LDAP
Configuring LDAP Server Groups
