Step Description Command Keys
12 Specify the number of failed
authentication attempts to block the
user login and time of the lock
(optional)
aaa authentication attempts max-
fail <COUNT> <TIME>
<COUNT> – amount of failed
authentication attempts after
which a user is blocked, takes
the values of [1..65535];
<TIME> – user blocking time in
minutes, takes the values of
[1..65535].
Default value:
<COUNT> – 5; <TIME> – 300
13 Set the port number to communicate
with remote LDAP server (optional).
esr(config-ldap-server)# port
<PORT>
<PORT> – number of TCP port
to exchange data with a remote
server, takes values of
[1..65535].
Default value: 389 for LDAP
server.
14 Prioritize the use of a remote LDAP
server (optional).
esr(config-ldap-server)# priority
<PRIORITY>
<PRIORITY> – remote server
priority, takes values in the
range of [1..65535].
The lower value, the higher the
priority of server is.
Default value: 1.
15 Set IPv4/IPv6 address that will be used
as source IPv4/IPv6 address in
transmitted LDAP packets.
esr(config-ldap-server)# source-
address { <ADDR> | <IPV6-ADDR> }
<ADDR> – source IP address,
defined as AAA.BBB.CCC.DDD
where each part takes values of
[0..255];
<IPV6-ADDR> – source IPv6
address, defined as X:X:X:X::X
where each part takes values in
hexadecimal format [0..FFFF].