ldap-configuration
This command configures the LDAP Servers table, which lets you define LDAP servers.
Syntax
(config-system)# ldap-configuration <Index> (ldap-configuration-<Index>)#
|
Command |
Description |
|---|---|
|
Index |
Defines the table row index. |
|
bind-dn |
Defines the LDAP server's bind Distinguished Name (DN) or username. |
|
domain-name |
Defines the domain name (FQDN) of the LDAP server. |
|
interface |
Defines the interface on which to send LDAP queries. |
|
ldap-servers-search-dns |
Defines the LDAP Search DN table, which lets you define LDAP base paths per LDAP Servers table. For more information, see ldap ldap-servers-search-dns. |
|
max-respond-time |
Defines the duration (in msec) that the device waits for LDAP server responses. |
|
mgmt-attr |
Defines the LDAP attribute name to query, which contains a list of groups to which the user is a member of. |
|
mgmt-ldap-groups |
Defines the Management LDAP Groups table, which lets you define an access level per management groups per LDAP Servers table. For more information, ldap mgmt-ldap-groups. |
|
password |
Defines the user password for accessing the LDAP server during connection and binding operations. |
|
server-group |
Assigns the LDAP server to an LDAP Server Group, configured in the LDAP Server Groups table. |
|
server-ip |
Defines the LDAP server's IP address. |
|
server-port |
Defines the LDAP server's port. |
|
tls-context |
Assigns a TLS Context if the connection with the LDAP server is TLS. |
|
use-tls {no|yes} |
Enables the device to encrypt the username and password (for Control and Management related queries) using TLS when sending them to the LDAP server. |
|
verify-certificate {no|yes} |
Enables certificate verification when the connection with the LDAP server uses TLS. |
|
verify-subject-name |
Enables the verification of the TLS certificate subject name (Common Name / CN or Subject Alternative Name / SAN) that is used in the incoming connection request from the LDAP server. |
Command Mode
Privileged User
Example
This example configures an LDAP server with IP address 10.15.7.8 and password "itsp1234":
(config-system)# ldap-configuration 0 (ldap-configuration-0)# server-ip 10.15.7.8 (ldap-configuration-0)# password itsp1234