DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Creates an LDAP server group and enters the LDAP server
group configuration mode for that group.
[
no
]
aaa group server ldap group-name
Example:
Step 2
switch(config)# aaa group server ldap LDAPServer1
switch(config-ldap)#
Configures the LDAP server as a member of the LDAP
server group.
[
no
]
server
{
ipv4-address
|
ipv6-address
|
host-name
}
Example:
Step 3
If the specified LDAP server is not found, configure it
using the
ldap-server host
command and retry this
command.
switch(config-ldap)# server 10.10.2.2
Performs LDAP authentication using the bind or compare
method. The default LDAP authentication method is the
bind method using first search and then bind.
(Optional) [
no
]
authentication
{
bind-first
[
append-with-baseDN DNstring
] |
compare
[
password-attribute password
]}
Example:
Step 4
switch(config-ldap)# authentication compare
password-attribute TyuL8r
Enables group validation. The group name should be
configured in the LDAP server. Users can login through
(Optional) [
no
]
enable user-server-group
Example:
Step 5
public-key authentication only if the username is listed as
a member of this configured group in the LDAP server.
switch(config-ldap)# enable user-server-group
Enables users to login only if the user profile lists the
subject-DN of the user certificate as authorized for login.
(Optional) [
no
]
enable Cert-DN-match
Example:
Step 6
switch(config-ldap)# enable Cert-DN-match
Specifies the VRF to use to contact the servers in the server
group.
(Optional) [
no
]
use-vrf vrf-name
Example:
Step 7
switch(config-ldap)# use-vrf vrf1
Exits LDAP server group configuration mode.
exit
Example:
Step 8
switch(config-ldap)# exit
switch(config)#
Displays the LDAP server group configuration.
(Optional)
show ldap-server groups
Example:
Step 9
switch(config)# show ldap-server groups
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
114
Configuring LDAP
Configuring LDAP Server Groups
