Configure Client Role LDAP Settings

About this task

To configure a wireless client‘s role policy and matching criteria:

Procedure

Go to Configuration → Security → Wireless Client Roles.
The Wireless Client Roles screen displays the name of those client role policies created thus far.
Wireless Client Roles Screen
Select Add to create a new Wireless Client Role policy, Edit to modify an existing policy or Delete to remove a policy.

The LDAP Settings tab displays by default.

Wireless Client Roles - Add/Edit - LDAP Settings Tab

In the Configuration section, define the following LDAP server parameters:


LDAP Query	If LDAP attributes are enabled for the selected wireless client role policy, select an LDAP query mode of either Internal (Self) or Through Wireless Controller. Select Internal (Self) to use local LDAP server resources configured in the LDAP Server Options.
Dead Period	When using an external LDAP server, select the Dead Period between 60 and 300 seconds. The Dead Period is the timeout value before the system will attempt to rebind with the LDAP server.
Timeout	When using an external LDAP server, select a Timeout value to specify how long of a delay between request and responses before LDAP bind and queries will be timed out.

In the LDAP Server Options section, use the + Add Row button to add an LDAP server to the list or double-click on an existing LDAP server entry to edit it.

When adding or editing the LDAP server options, define the following parameters:


ServerId	When adding or editing an LDAP server entry, enter the LDAP server ID as either 1 or 2.
Host	When adding or editing an LDAP server entry, enter the LDAP server's fully qualified domain name or IP address in the Host field.
Bind DN	When adding or editing an LDAP server entry, enter the LDAP server's bind distinguished name in the Bind DN field.
Base DN	When adding or editing an LDAP server entry, enter the LDAP server's base distinguished name in the Base DN field.
Bind Password	When adding or editing an LDAP server entry, enter the password for bind. Click the Show button to display the password.
Port	When adding or editing an LDAP server entry, enter the LDAP server port number. To select from a list of frequently used services and their corresponding port numbers, use the drop-down menu and select a service.