H3C S5830V2 Security Configuration Manual page 51

Tasks at a glance
(Required.)
(Optional.)
Creating an LDAP server
Step
1. Enter system view.
2. Create an LDAP server and
enter its view.
Configuring the IP address of the LDAP server
Step
1. Enter system view.
2. Enter LDAP server view.
3. Configure the IP address of
the LDAP server.
Specifying the LDAP version
Specify the LDAP version on the NAS. The device supports LDAPv2 and LDAPv3, and the LDAP version
specified on the device must be consistent with that specified on the LDAP server.
To specify the LDAP version:
Step
1. Enter system view.
2. Enter LDAP server view.
3. Specify the LDAP version.
Setting the LDAP server timeout period
If the device sends a bind or search request to an LDAP server but receives no response from the server
within the LDAP server timeout period, the device considers that the authentication or authorization
request has timed out and tries the backup authentication or authorization method. If no backup method
is configured in the ISP domain, the device considers the authentication or authorization attempt fails.
To set the LDAP server timeout period:
Specifying the LDAP authentication server
Displaying and maintaining LDAP
Command
system-view
ldap server server-name
Command
system-view
ldap server server-name
protocol-version { v2 | v3 }
Command
System-view
ldap server server-name
{ ip ip-address | ipv6
ipv6-address } [ port port-number ]
[ vpn-instance vpn-instance-name ]
37
Remarks
N/A
By default, no LDAP server exists.
Remarks
N/A
N/A
By default, an LDAP server has no
IP address.
You can configure either an IPv4
address or an IPv6 address for an
LDAP server. The most recent
configuration takes effect.
Remarks
N/A
N/A
By default, LDAPv3 is used.
A Microsoft LDAP server supports only
LDAPv3.