Configuring Ldap Server Hosts - Cisco Nexus 9000 Series Configuration Manual

Configuring LDAP

Configuring LDAP Server Hosts

To access a remote LDAP server, you must configure the IP address or the hostname for the LDAP server on
the Cisco NX-OS device. You can configure up to 64 LDAP servers.
Note By default, when you configure an LDAP server IP address or hostname on the Cisco NX-OS device, the
LDAP server is added to the default LDAP server group. You can also add the LDAP server to another LDAP
server group.
Before you begin
Enable LDAP.
Obtain the IPv4 or IPv6 addresses or the hostnames for the remote LDAP servers.
If you plan to enable the Secure Sockets Layer (SSL) protocol, make sure that the LDAP server certificate is
manually configured on the Cisco NX-OS device.
SUMMARY STEPS
1. configure terminal
2. [no] ldap-server host {ipv4-address | ipv6-address | host-name} [enable-ssl]
3. (Optional) show ldap-server
4. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 [no] ldap-server host {ipv4-address | ipv6-address |
host-name} [enable-ssl]
Example:
switch(config)# ldap-server host 10.10.2.2
enable-ssl
Step 3 (Optional) show ldap-server
Example:
Configuring LDAP Search Maps, on page 118
Configuring Periodic LDAP Server
Configuring the LDAP Dead-Time
Configuring AAA Authorization on LDAP
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Monitoring, on page 119
Interval, on page 120
Servers, on page 121
Purpose
Enters global configuration mode.
Specifies the IPv4 or IPv6 address or hostname for an LDAP
server.
The enable-ssl keyword ensures the integrity and
confidentiality of the transferred data by causing the LDAP
client to establish an SSL session prior to sending the bind
or search request.
Displays the LDAP server configuration.
Configuring LDAP Server Hosts
111