Enables LDAP service and specifies the LDAP server query mode

Configuring the LDAP server query mode automatically enables LDAP service on this role policy. By default LDAP service is disabled.

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


ldap-query [self|through-controller]


ldap-query [self|through-controller]


Configures LDAP query mode as self. The AP directly queries the LDAP server for user information. Select ‘self‘ to use local LDAP server resources configured using the ldap-server command.


Configures LDAP query mode as through-controller. The AP queries the LDAP server, for user information, through the controller.

Use this option when the AP is layer 2 adopted to the controller.


nx9500-6C8809(config-role-policy-test)#ldap-query self
nx9500-6C8809(config-role-policy-test)#show context
role-policy test
 default-role use ip-access-list in test precedence 1
 ldap-query self
 ldap-deadperiod 100

Related Commands

no (role-policy-config-mode-command)

Disables LDAP service on this role policy