Cisco Nexus 9000 Series - Page 140

DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Creates an LDAP server group and enters the LDAP server
group configuration mode for that group.
[no] aaa group server ldap group-name
Example:
Step 2
switch(config)# aaa group server ldap LDAPServer1
switch(config-ldap)#
Configures the LDAP server as a member of the LDAP
server group.
[no] server {ipv4-address | ipv6-address | host-name}
Example:
Step 3
If the specified LDAP server is not found, configure it
using the ldap-server host command and retry this
command.
switch(config-ldap)# server 10.10.2.2
Performs LDAP authentication using the bind or compare
method. The default LDAP authentication method is the
bind method using first search and then bind.
(Optional) [no] authentication {bind-first
[append-with-baseDN DNstring] | compare
[password-attribute password]}
Example:
Step 4
switch(config-ldap)# authentication compare
password-attribute TyuL8r
Enables group validation. The group name should be
configured in the LDAP server. Users can login through
(Optional) [no] enable user-server-group
Example:
Step 5
public-key authentication only if the username is listed as
a member of this configured group in the LDAP server.
switch(config-ldap)# enable user-server-group
Enables users to login only if the user profile lists the
subject-DN of the user certificate as authorized for login.
(Optional) [no] enable Cert-DN-match
Example:
Step 6
switch(config-ldap)# enable Cert-DN-match
Specifies the VRF to use to contact the servers in the server
group.
(Optional) [no] use-vrf vrf-name
Example:
Step 7
switch(config-ldap)# use-vrf vrf1
Exits LDAP server group configuration mode.exit
Example:
Step 8
switch(config-ldap)# exit
switch(config)#
Displays the LDAP server group configuration.(Optional) show ldap-server groups
Example:
Step 9
switch(config)# show ldap-server groups
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
114
Configuring LDAP
Configuring LDAP Server Groups