User's Manual 256 Document #: LTRT-10632
Mediant 800B Gateway & E-SBC
15.4.2 Enabling LDAP-based Web/CLI User Login Authentication and
Authorization
The LDAP service can be used for authenticating and authorizing device management
users (Web and CLI), based on the user's login username and password (credentials). At
the same, it can also be used to determine users' management access levels (privileges).
Before you can configure LDAP-based login authentication, you must enable this type of
LDAP service, as described in the following procedure.
 To enable LDAP-based login authentication:
1. Open the Authentication Server page (Setup menu > Administration tab > Web &
CLI folder > Authentication Server).
Figure 15-20: Enabling LDAP-based Login Authentication
2. Under the LDAP group, from the 'Use LDAP for Web/Telnet Login' drop-down list,
select Enable.
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
15.4.3 Configuring LDAP Server Groups
The LDAP Server Groups table lets you configure up to 41 LDAP Server Groups. An LDAP
Server Group is a logical configuration entity that contains up to two LDAP servers. LDAP
servers are assigned to LDAP Server Groups in the LDAP Servers table (see 'Configuring
LDAP Servers' on page 258). To use a configured LDAP server, you must assign it to an
LDAP Server Group.
To use an LDAP server for call routing, you must configure its' LDAP Server Group as
"Control" type, and then assign the LDAP Server Group to a Routing Policy. The Routing
Policy in turn, needs to be assigned to the relevant routing rule(s). A Routing Policy can be
assigned only one LDAP Server Group. Therefore, for multi-tenant deployments where
multiple Routing Policies are employed, each tenant can be assigned a specific LDAP
Server Group through its unique Routing Policy.
To use an LDAP server for management user login authentication and authorization, you
must configure its' LDAP Server Group as "Management" type. Additional LDAP-based
management parameters need to be configured, as described in 'Enabling LDAP-based
Web/CLI User Login Authentication and Authorization' on page 256 and 'Configuring LDAP
Servers' on page 258.
The following procedure describes how to configure an LDAP Server Group through the
Web interface. You can also configure it through ini file (LDAPServerGroups) or CLI
(configure system > ldap ldap-server-groups).
Note:
The device provides a preconfigured LDAP Server Group
("DefaultCTRLServersGroupin") in the LDAP Server Groups table, which can be
modified or deleted.
 To configure an LDAP Server Group:
1. Open the LDAP Server Groups table (Setup menu > IP Network tab > RADIUS &
LDAP folder > LDAP Server Groups).
To Next Page
Loading...
Need help?
General
