ESR series service routers.ESR-Series. User manual
•
•
Step Description Command Keys
6 Specify the user search scope in
LDAP server tree (optional).
esr(config)# ldap-server search
scope <SCOPE>
<SCOPE> – user search scope on
LDAP server, takes the following
values:
onelevel – search through the
objects on the level following
a basic DN tree in LDAP
server tree;
subtree – search through all
objects of basic DN subtree
in LDAP server tree.
Default value: subtree.
7 Specify the interval after which
the device assumes that LDAP
server has not found users
entries satisfying the search
condition (optional).
esr(config)# ldap-server search
timeout <SEC>
<SEC> – time interval in seconds,
takes values of [0..30]
Default value: 0 – device is waiting
for search completion and response
from LDAP server.
8 Specify an attribute name of the
object which is compared with
the name of the desired user on
LDAP server (optional).
esr(config)# ldap-server naming-
attribute <NAME>
<NAME> – object attribute name,
set by the string of up to 127
characters.
Default value: uid.
9 Specify the object attribute name
which is compared with the name
of a desired user on LDAP server
(optional).
esr(config)# ldap-server
privilege-level-attribute <NAME>
<NAME> – object attribute name,
set by the string of up to 127
characters.
Default value: priv-lvl
10 Set the DSCP code global value
for the use in IP headers of LDAP
server egress packets (optional).
esr(config)# ldap-server dscp
<DSCP>
<DSCP> – DSCP code value, takes
values in the range of [0..63].
Default value: 63
11 Add LDAP server to the list of
used servers and switch to its
configuration mode.
esr(config)# ldap -server host
{ <IP-ADDR> | <IPV6-ADDR> }
[ vrf <VRF> ]
esr(config-ldap-server)#
<IP-ADDR> – LDAP server IP
address, defined as
AAA.BBB.CCC.DDD where each part
takes values of [0..255]
<IPV6-ADDR> – LDAP server IPv6
address, defined as X:X:X:X::X where
each part takes values in
hexadecimal format [0..FFFF]
<VRF> – VRF instance name, set by
the string of up to 31 characters.