PurposeCommand or Action
default value for the idle timer is 60 minutes, and the valid
range is from 1 to 1440 minutes.
minutes | password password [idle-time minutes] |
username name [password password [idle-time minutes]]]
Example:
We recommend that the user not be an existing
user in the LDAP server database.
Note
switch(config)# ldap-server host 10.10.1.1 test
rootDN root1 username user1 password Ur2Gd2BH
idle-time 3
Specifies the number of minutes before the Cisco NX-OS
device checks an LDAP server that was previously
[no] ldap-server deadtime minutes
Example:
Step 3
unresponsive. The default value is 0 minutes, and the valid
range is from 1 to 60 minutes.
switch(config)# ldap-server deadtime 5
Displays the LDAP server configuration.(Optional) show ldap-server
Example:
Step 4
switch(config)# show ldap-server
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 5
switch(config)# copy running-config startup-config
Related Topics
LDAP Server Configuration Process, on page 109
Enabling or Disabling LDAP, on page 110
Configuring LDAP Server Hosts, on page 111
Configuring the LDAP Dead-Time Interval
You can configure the dead-time interval for all LDAP servers. The dead-time interval specifies the time that
the Cisco NX-OS device waits, after declaring that an LDAP server is dead, before sending out a test packet
to determine if the server is now alive.
When the dead-time interval is 0 minutes, LDAP servers are not marked as dead even if they are not responding.
You can configure the dead-time interval per group.
Note
Before you begin
Enable LDAP.
SUMMARY STEPS
1. configure terminal
2. [no] ldap-server deadtime minutes
3. (Optional) show ldap-server
4. (Optional) copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
120
Configuring LDAP
Configuring the LDAP Dead-Time Interval
To Next Page
Loading...
