Configuring Tcp Ports; Configuring Ldap Search Maps - Cisco MDS 9000 Series Configuration Manual

Configuring TCP Ports

Configuring TCP Ports
You can configure another TCP port for the LDAP servers if there are conflicts with another application. By
default, Cisco NX-OS devices use port 389 for all LDAP requests.
To configure the TCP ports, follow these steps:
Procedure
Step 1
switch# configure terminal
switch(config)#
Enters global configuration mode.
Step 2 switch(config)# ldap-server host 10.10.1.1 port 200 timeout 5
Specifies the TCP port to use for LDAP messages to the server. The default TCP port is 389. The range is
from 1 to 65535. Optionally specifies the timeout interval for the server. The range is from 1 to 60 seconds,
and the default timeout is the global value or 5 seconds if a global value is not configured.
Note
Step 3
switch(config)# exit
switch#
Exits configuration mode.
Step 4 switch# show ldap-server
(Optional) Displays the LDAP server configuration.
Step 5
switch# copy running-config startup-config
(Optional) Copies the running configuration to the startup configuration.

Configuring LDAP Search Maps

You can configure LDAP search maps to send a search query to the LDAP server. The server searches its
database for data meeting the criteria specified in the search map.
To configure the LDAP search maps, follow these steps:
Procedure
Step 1 switch# configure terminal
switch(config)#
Enters global configuration mode.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
50
The timeout interval value specified for an LDAP server overrides the global timeout interval value
specified for all LDAP servers.
Configuring Security Features on an External AAA Server