Cisco Nexus 9000 Series Configuration Manual page 140
Nx-os security configuration guide, release 9.x
Hide thumbs
Also See for Nexus 9000 Series:
- Configuration manual (276 pages) ,
- Troubleshooting manual (126 pages) ,
- Quick start configuration manual (6 pages)
Table of Contents
Advertisement
Configuring LDAP Server Groups
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
[no] aaa group server ldap group-name
Example:
switch(config)# aaa group server ldap LDAPServer1
switch(config-ldap)#
Step 3
[no] server {ipv4-address | ipv6-address | host-name}
Example:
switch(config-ldap)# server 10.10.2.2
Step 4
(Optional) [no] authentication {bind-first
[append-with-baseDN DNstring] | compare
[password-attribute password]}
Example:
switch(config-ldap)# authentication compare
password-attribute TyuL8r
Step 5
(Optional) [no] enable user-server-group
Example:
switch(config-ldap)# enable user-server-group
Step 6
(Optional) [no] enable Cert-DN-match
Example:
switch(config-ldap)# enable Cert-DN-match
Step 7
(Optional) [no] use-vrf vrf-name
Example:
switch(config-ldap)# use-vrf vrf1
Step 8
exit
Example:
switch(config-ldap)# exit
switch(config)#
Step 9
(Optional) show ldap-server groups
Example:
switch(config)# show ldap-server groups
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
114
Purpose
Enters global configuration mode.
Creates an LDAP server group and enters the LDAP server
group configuration mode for that group.
Configures the LDAP server as a member of the LDAP
server group.
If the specified LDAP server is not found, configure it
using the ldap-server host command and retry this
command.
Performs LDAP authentication using the bind or compare
method. The default LDAP authentication method is the
bind method using first search and then bind.
Enables group validation. The group name should be
configured in the LDAP server. Users can login through
public-key authentication only if the username is listed as
a member of this configured group in the LDAP server.
Enables users to login only if the user profile lists the
subject-DN of the user certificate as authorized for login.
Specifies the VRF to use to contact the servers in the server
group.
Exits LDAP server group configuration mode.
Displays the LDAP server group configuration.
Configuring LDAP
- Quick Links:
- Radius and Tacacs+ Security Protocols
Hide quick links:
Advertisement
Table of Contents
