, on page 118
Configuring Periodic LDAP Server Monitoring
, on page 119
Configuring the LDAP Dead-Time Interval
, on page 120
Configuring AAA Authorization on LDAP Servers
, on page 121
Configuring LDAP Server Hosts
To access a remote LDAP server, you must configure the IP address or the hostname for the LDAP server on
the Cisco NX-OS device. You can configure up to 64 LDAP servers.
By default, when you configure an LDAP server IP address or hostname on the Cisco NX-OS device, the
LDAP server is added to the default LDAP server group. You can also add the LDAP server to another LDAP
server group.
Note
Before you begin
Enable LDAP.
Obtain the IPv4 or IPv6 addresses or the hostnames for the remote LDAP servers.
If you plan to enable the Secure Sockets Layer (SSL) protocol, make sure that the LDAP server certificate is
manually configured on the Cisco NX-OS device.
SUMMARY STEPS
1.
configure terminal
2.
[
no
]
ldap-server host
{
ipv4-address
|
ipv6-address
|
host-name
} [
enable-ssl
]
3.
(Optional)
show ldap-server
4.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Specifies the IPv4 or IPv6 address or hostname for an LDAP
server.
[
no
]
ldap-server host
{
ipv4-address
|
ipv6-address
|
host-name
} [
enable-ssl
]
Step 2
Example:
The
enable-ssl
keyword ensures the integrity and
confidentiality of the transferred data by causing the LDAP
switch(config)# ldap-server host 10.10.2.2
enable-ssl
client to establish an SSL session prior to sending the bind
or search request.
Displays the LDAP server configuration.
(Optional)
show ldap-server
Example:
Step 3
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
111
Configuring LDAP
Configuring LDAP Server Hosts
