ESR series service routers.ESR-Series. User manual
Step Description Command Keys
12 Specify the number of failed 
authentication attempts to block 
the user login and time of the lock 
(optional)
aaa authentication attempts max-
fail <COUNT> <TIME>
<COUNT> – amount of failed 
authentication attempts after which 
a user is blocked, takes the values 
of [1..65535];
<TIME> – user blocking time in 
minutes, takes the values of 
[1..65535].
Default value:
<COUNT> – 5; <TIME> – 300
13 Set the port number to 
communicate with remote LDAP 
server (optional).
esr(config-ldap-server)# port 
<PORT>
<PORT> – number of TCP port to 
exchange data with a remote server, 
takes values of [1..65535].
Default value: 389 for LDAP server.
14 Prioritize the use of a remote 
LDAP server (optional).
esr(config-ldap-server)# priority 
<PRIORITY>
<PRIORITY> – remote server priority, 
takes values in the range of 
[1..65535].
The lower value, the higher the 
priority of server is.
Default value: 1.
15 Set IPv4/IPv6 address that will be 
used as source IPv4/IPv6 
address in transmitted LDAP 
packets.
esr(config-ldap-server)# source-
address { <ADDR> | <IPV6-
ADDR> }
<ADDR> – source IP address, 
defined as AAA.BBB.CCC.DDD 
where each part takes values of 
[0..255];
<IPV6-ADDR> – source IPv6 
address, defined as X:X:X:X::X where 
each part takes values in 
hexadecimal format [0..FFFF].
16 Set router interface or tunnel, 
IPv4/IPv6 address of which will 
be used as IPv4/IPv6 source 
address in sent LDAP packets.
esr(config-ldap-server)# source-
interface { <IF> | <TUN> }
<IF> – interface specified in form 
given in theTypes and naming 
procedure of router interfaces 
section of CLI command reference 
guide.
<TUN> – tunnel name specified in 
form given in the Types and naming 
procedure of router tunnels section.