Configuring Ldap Server Hosts; Configuring The Rootdn For An Ldap Server - Cisco MDS 9000 Series Configuration Manual

Configuring Security Features on an External AAA Server
(Optional) Copies the running configuration to the startup configuration.

Configuring LDAP Server Hosts

To access a remote LDAP server, you must configure the IP address or the hostname for the LDAP server on
the Cisco NX-OS device. You can configure up to 64 LDAP servers.
Note By default, when you configure an LDAP server IP address or hostname on the Cisco NX-OS device, the
LDAP server is added to the default LDAP server group. You can also add the LDAP server to another LDAP
server group. Starting from Cisco MDS NX-OS Release 8.2(1), when TCP port 636 is configured, the connection
establishment securely starts with an SSL or TLS negotiation. For other ports, this is done explicitly using
the enable-ssl keyword as shown in Step 2 of the below configuration.
To configure LDAP server hosts, follow these steps:
Procedure
Step 1
switch# configure terminal
switch(config)#
Enters global configuration mode.
Step 2 switch(config)# ldap-server host 10.10.2.2 enable-ssl
Specifies the IPv4 or IPv6 address or hostname for an LDAP server.
The enable-ssl keyword ensures the integrity and confidentiality of the transferred data by causing the LDAP
client to establish a Secure Sockets Layer (SSL) session prior to sending the bind or search request.
Step 3 switch(config)# exit
switch#
Exits configuration mode.
Step 4
switch# copy running-config startup-config
(Optional) Copies the running configuration to the startup configuration.

Configuring the RootDN for an LDAP Server

You can configure the root designated name (DN) for the LDAP server database. The rootDN is used to bind
to the LDAP server to verify its state.
To configure the RootDN for an LDAP server, follow these steps:
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Configuring LDAP Server Hosts
45