Ldap - Cisco Nexus 9000 Series Configuration Manual

Overview

LDAP

The Lightweight Directory Access Protocol (LDAP) provides centralized validation of users attempting to
gain access to a Cisco NX-OS device. LDAP allows a single access control server (the LDAP daemon) to
provide authentication and authorization independently.
Related Topics
SSH and Telnet
You can use the Secure Shell (SSH) server to enable an SSH client to make a secure, encrypted connection
to a Cisco NX-OS device. SSH uses strong encryption for authentication. The SSH server in the Cisco NX-OS
software can interoperate with publicly and commercially available SSH clients.
The SSH client in the Cisco NX-OS software works with publicly and commercially available SSH servers.
The Telnet protocol enables TCP/IP connections to a host. Telnet allows a user at one site to establish a TCP
connection to a login server at another site and then passes the keystrokes from one device to the other. Telnet
can accept either an IP address or a domain name as the remote device address.
Related Topics
User Accounts and Roles
You can create and manage user accounts and assign roles that limit access to operations on the Cisco NX-OS
device. Role-based access control (RBAC) allows you to define the rules for an assign role that restrict the
authorization that the user has to access management operations.
Related Topics
IP ACLs
IP ACLs are ordered sets of rules that you can use to filter traffic based on IPv4 information in the Layer 3
header of packets. Each rule specifies a set of conditions that a packet must satisfy to match the rule. When
the Cisco NX-OS software determines that an IP ACL applies to a packet, it tests the packet against the
conditions of all rules. The first match determines whether a packet is permitted or denied, or if there is no
match, the Cisco NX-OS software applies the applicable default rule. The Cisco NX-OS software continues
processing packets that are permitted and drops packets that are denied.
Related Topics
Configuring LDAP
Configuring SSH and Telnet
Configuring User Accounts and RBAC
Configuring IP ACLs
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
LDAP
5