Configuring Ldap Schemes - HPE FlexFabric 5940 Series Security Configuration Manual

•
When an HWTACACS server's status changes automatically, the device changes this server's
status accordingly in all HWTACACS schemes in which this server is specified.
To set HWTACACS timers:
Step
1. Enter system view.
2. Enter HWTACACS scheme
view.
3. Set the HWTACACS server
response timeout timer.
4. Set the real-time accounting
interval.
5. Set the server quiet timer.
Displaying and maintaining HWTACACS
Execute display commands in any view and reset commands in user view.
Task
Display the configuration or server
statistics of HWTACACS schemes.
Display information about buffered
HWTACACS stop-accounting requests
to which no responses have been
received.
Clear HWTACACS statistics.
Clear the buffered HWTACACS
stop-accounting requests to which no
responses have been received.

Configuring LDAP schemes

Configuration task list
Tasks at a glance
Configuring an LDAP server:
•
(Required.)
•
(Required.)
•
(Optional.)
•
(Optional.)
•
(Required.)
•
(Required.)
Command
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout
seconds
timer realtime-accounting
minutes
timer quiet minutes
Creating an LDAP server
Configuring the IP address of the LDAP server
Specifying the LDAP version
Setting the LDAP server timeout period
Configuring administrator attributes
Configuring LDAP user attributes
Command
display hwtacacs scheme [ hwtacacs-scheme-name
[ statistics ] ]
display stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
reset hwtacacs statistics { accounting | all | authentication |
authorization }
reset stop-accounting-buffer hwtacacs-scheme
hwtacacs-scheme-name
42
Remarks
N/A
N/A
By default, the HWTACACS
server response timeout timer is 5
seconds.
By default, the real-time
accounting interval is 12 minutes.
A short interval helps improve
accounting precision but requires
many system resources. When
there are 1000 or more users, set
a longer interval.
By default, the server quiet timer
is 5 minutes.