Cisco Cisco Access Registrar 4.2 Specifikace stáhnout pdf (Strana 206)

100

101

5-22

Cisco Wireless LAN Controller Configuration Guide

OL-13826-01

Chapter 5 Configuring Security Solutions

Configuring LDAP

d. From the LDAP Servers drop-down boxes, choose the LDAP server(s) that you want to use with this

WLAN. You can choose up to three LDAP servers, which are tried in priority order.

e. Click Apply to commit your changes.

f. Click Save Configuration to save your changes.

Using the CLI to Configure LDAP

Use the commands in this section to configure LDAP using the controller CLI.

Note Refer to the “Using the GUI to Configure LDAP” section on page 5-19 for the valid ranges and default

values of the parameters used in the CLI commands.

1. Use these commands to configure an LDAP server:

• config ldap add index server_ip_address port# user_dn password base_dn {secure}—Adds an

LDAP server.

• config ldap delete index—Deletes a previously added LDAP server.

• config ldap {enable | disable} index—Enables or disables an LDAP server.

• config ldap retransmit-timeout index timeout—Configures the number of seconds between

retransmissions for an LDAP server.

2. Use this command to specify LDAP as the priority backend database server:

config local-auth user-credentials ldap

Note If you enter config local-auth user-credentials ldap local, local EAP attempts to

authenticate clients using the LDAP backend database and fails over to the local user

database if the LDAP servers are not reachable. If the user is not found, the authentication

attempt is rejected. If you enter config local-auth user-credentials local ldap, local EAP

attempts to authenticate using only the local user database. It does not fail over to the LDAP

backend database.

3. (Optional) Use these commands if you wish to assign specific LDAP servers to a WLAN:

• config wlan ldap add wlan_id index—Links a configured LDAP server to a WLAN.

• config wlan ldap delete wlan_id {all | index}—Deletes a specific or all configured LDAP

server(s) from a WLAN.

4. Use these commands to view information pertaining to configured LDAP servers:

• show ldap summary—Shows a summary of the configured LDAP servers.

• show ldap detailed index—Shows detailed LDAP server information.

• show ldap statistics—Shows LDAP server statistics.

• show wlan wlan_id—Shows the LDAP servers that are applied to a WLAN.

1 2 ... 201 202 203 204 205 206 207 208 209 210 211 ... 635 636

Komentáře k této Příručce

Žádné komentáře

Cisco Cisco Access Registrar 4.2 Specifikace Strana 206

Komentáře k této Příručce