ESR series service routers.ESR-Series. User manual
Step Description Command Keys
12 Specify the number of failed
authentication attempts to block
the user login and time of the lock
(optional)
aaa authentication attempts max-
fail <COUNT> <TIME>
<COUNT> – amount of failed
authentication attempts after which
a user is blocked, takes the values
of [1..65535];
<TIME> – user blocking time in
minutes, takes the values of
[1..65535].
Default value:
<COUNT> – 5; <TIME> – 300
13 Set the port number to
communicate with remote LDAP
server (optional).
esr(config-ldap-server)# port
<PORT>
<PORT> – number of TCP port to
exchange data with a remote server,
takes values of [1..65535].
Default value: 389 for LDAP server.
14 Prioritize the use of a remote
LDAP server (optional).
esr(config-ldap-server)# priority
<PRIORITY>
<PRIORITY> – remote server priority,
takes values in the range of
[1..65535].
The lower value, the higher the
priority of server is.
Default value: 1.
15 Set IPv4/IPv6 address that will be
used as source IPv4/IPv6
address in transmitted LDAP
packets.
esr(config-ldap-server)# source-
address { <ADDR> | <IPV6-
ADDR> }
<ADDR> – source IP address,
defined as AAA.BBB.CCC.DDD
where each part takes values of
[0..255];
<IPV6-ADDR> – source IPv6
address, defined as X:X:X:X::X where
each part takes values in
hexadecimal format [0..FFFF].
16 Set router interface or tunnel,
IPv4/IPv6 address of which will
be used as IPv4/IPv6 source
address in sent LDAP packets.
esr(config-ldap-server)# source-
interface { <IF> | <TUN> }
<IF> – interface specified in form
given in theTypes and naming
procedure of router interfaces
section of CLI command reference
guide.
<TUN> – tunnel name specified in
form given in the Types and naming
procedure of router tunnels section.