Configuring Ldap On The Ace; Setting The Ldap Server Parameters; Setting The Global Ldap Server Port Setting; Setting The Global Ldap Server Timeout Value - Cisco 4700M Configuration Manual

Chapter 2 Configuring Authentication and Accounting Services
Setting the Global TACACS+ Server Timeout Value

Configuring LDAP on the ACE

OL-16202-01
Configuring the ACE as a Client of a RADIUS, TACACS+, or LDAP Server
To set the TACACS+ server dead-time interval to 0, enter:
host1/Admin(config)# no tacacs-server deadtime 15
By default, the ACE waits 1 second to receive a response from a TACACS+ server
before it declares a timeout failure and attempts to contact the next server in the
group. Use the tacacs-server timeout command to globally change the time
interval that the ACE waits for the TACACS+ server to reply before retransmitting
an authentication request to the TACACS+ server. The ACE applies this global
timeout value to those TACACS+ servers for which a timeout value is not
individually configured by the tacacs-server host command.
The syntax of this command is as follows:
tacacs-server timeout seconds
The seconds argument is the timeout value in seconds. Valid entries are from 1 to
60 seconds. The default is 1 second.
For example, to globally configure the timeout value to 30 seconds, enter:
host1/Admin(config)# tacacs-server timeout 30
To revert to the default of 1 second between transmission attempts, enter:
host1/Admin(config)# no tacacs-server timeout 30
The ACE supports the LDAP protocol to communicate with a remote LDAP
directory server for authentication services. This section defines the configuration
of the ACE to operate as a client of an LDAP server.
This section contains the following topics:
•

Setting the LDAP Server Parameters

Setting the Global LDAP Server Port Setting

•

Setting the Global LDAP Server Timeout Value

•
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
2-35