TANDBERG Border Controller User Guide
Page 43 of 118
Configuring LDAP base DN
The Border Controller needs to be configured with the area of the directory which will be searched for the
communication device information. This should be specified as the Distinguished Name (DN) in the
directory under which the H.350 objects reside. To do this, either issue the following command:
xConfiguration Authentication LDAP BaseDN: "Your base DN"
or navigate to
Border Controller Configuration
>
Authentication
and enter the name of the directory in
the
LDAP base DN
field.
Configuring LDAP server access
The Border Controller must also be configured with the location of the LDAP server and the security
credentials required to gain access to the LDAP server.
To configure the LDAP server access, either issue the following commands:
xConfiguration LDAP Server Address: "ldap server address"
xConfiguration LDAP Server Port: 389
xConfiguration LDAP UserDN: "Your user DN"
xConfiguration LDAP Password: "password"
or navigate to
Border Controller Configuration
>
Authentication
and complete the relevant fields.
Viewing LDAP server connection status
To view the status of the connection between the Border Controller and the LDAP server, either issue the
following command:
xstatus LDAP
or navigate to
Border Controller Configuration
>
Authentication
. The server status will be shown in a
panel on the right-hand side of the screen.
9.2.4.
Enforced dial plans
If LDAP authentication is in use, you may control what aliases an endpoint is allowed to register with.
This allows you centralized control of your dial plan.
When an endpoint registers, it presents a list of aliases it wishes to use. You can control whether these
aliases are used, replaced by those in the H.350 directory, or combined with those in the directory.
To set which aliases are used, either issue the following command:
xConfiguration Authentication LDAP AliasOrigin: <LDAP/Endpoint/Combined>
or navigate to
Border Controller Configuration
>
Authentication
and select the desired option from the
LDAP alias origin
drop-down menu.
The settings are as follows:
LDAP
(default setting)
The LDAP aliases will be used and those presented by the endpoint ignored.
If no aliases are present in the LDAP database for the endpoint which is
registering, then the endpoint's aliases will be used.
Endpoint
The endpoint's aliases will be used, and any in the LDAP database will be
ignored.
Combined
The endpoint will be registered with both the aliases which it has presented and
those configured in the LDAP database.