Configuring Ldap; Using The Gui To Configure Ldap - Cisco 2100 Series Configuration Manual

Chapter 5 Configuring Security Solutions

Configuring LDAP

This section explains how to configure a Lightweight Directory Access Protocol (LDAP) server as a
backend database, similar to a RADIUS or local user database. An LDAP backend database allows the
controller to query an LDAP server for the credentials (username and password) of a particular user.
These credentials are then used to authenticate the user. For example, local EAP may use an LDAP server
as its backend database to retrieve user credentials. Refer to the
page 5-38
The LDAP backend database supports these local EAP methods: EAP-TLS, EAP-FAST/GTC, and
Note
PEAPv1/GTC. LEAP, EAP-FAST/MSCHAPv2, and PEAPv0/MSCHAPv2 are also supported but only
if the LDAP server is set up to return a clear-text password. For example, Microsoft Active Directory is
not supported because it does not return a clear-text password. If the LDAP server cannot be configured
to return a clear-text password, LEAP, EAP-FAST/MSCHAPv2, and PEAPv0/MSCHAPv2 are not
supported.
You can configure LDAP through either the GUI or the CLI.

Using the GUI to Configure LDAP

Follow these steps to configure LDAP using the controller GUI.
Click Security > AAA > LDAP to open the LDAP Servers page (see
Step 1
Figure 5-17
This page lists any LDAP servers that have already been configured.
•
•
Perform one of the following:
Step 2
•
•
OL-17037-01
for more information.
LDAP Servers Page
If you want to delete an existing LDAP server, hover your cursor over the blue drop-down arrow for
that server and choose Remove.
If you want to make sure that the controller can reach a particular server, hover your cursor over the
blue drop-down arrow for that server and choose Ping.
To edit an existing LDAP server, click the index number for that server. The LDAP Servers > Edit
page appears.
To add an LDAP server, click New. The LDAP Servers > New page appears (see
"Configuring Local EAP" section on
Figure
Cisco Wireless LAN Controller Configuration Guide
Configuring LDAP
5-17).
Figure 5-18).
5-33