Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SECURE ACCESS DEVICES GUIDE REV 01 Manual page 186

Configuring Secure Access Devices Guide
168
Table 42: Secure Access LDAP Server Instance Configuration
Details (continued)
Option Function
Backup LDAP Specifies the parameters for backup
Server1 LDAP server1 (optional).
NOTE: The device uses this type of
server for failover processing. Also,
backup LDAP server must be the
same version as the primary LDAP
server.
Backup LDAP Specifies the parameters for backup
Port1 LDAP port1.
Backup LDAP Specifies the parameters for backup
Server2 LDAP server2 (optional).
Backup LDAP Specifies the parameters for backup
Port2 LDAP port2.
LDAP Server Specifies the type of LDAP server
Type that you want to authenticate users
against.
Connection Specifies whether or not the
connection between the Secure
Access device and LDAP Directory
Service should be unencrypted, use
SSL (LDAPs), or should use TLS.
Connection Specifies how long you want the
Timeout Secure Access device to wait for a
(seconds) connection to the primary LDAP
server first, and then each backup
LDAP server in turn.
Search Specifies how long you want the
Timeout Secure Access device to wait for
(seconds) search results from a connected
LDAP server.
LDAP Settings > Authentication tab
Authentication Specifies if the device needs to
required to authenticate against the LDAP
search LDAP Directory Service to perform a
search or to change passwords
using the password management
feature.
Admin DN Performs an anonymous search on
the LDAP server with an
authentication.
Your Action
Enter the IP address of the backup LDAP
server1.
NOTE: We do not recommend entering
hostname as it may accelerate failover
processing by eliminating the need to
resolve the hostname to an IP address.
Enter the port number for the backup
LDAP port1.
Enter the IP address of the backup LDAP
server2.
Enter the port number for the backup
LDAP port2.
Select the type of LDAP server from the
drop-down list.
Select the type of connection from the
drop-down list.
Set the time required for the connection
to time out.
Set the time required for the search to
time out.
Select LDAP Settings > Authentication
> Authentication required to search
LDAP to enable this option.
Enter the admin DN name.
Copyright © 2010, Juniper Networks, Inc.