Configures an LDAP server to connect for external or remote authentication.
By default, the LDAP server is not configured.
Global configuration mode
Use this command to sets up a connection to the Lightweight Directory Access Protocol (LDAP) server host, or modifies an existing configuration. A maximum of 5 LDAP servers can be configured on a device.
Enter no ldap-server host to delete the server configuration.
Invoking no on an attribute sets the attribute with its default value.
By default, all management services are enabled on the management VRF ("mgmt-vrf") and the default VRF ("default-vrf").
This example adds an LDAP server on port 3890 with retries set to 3.
device(config)# ldap-server host 10.24.65.6 device(config-host-10.24.65.6/mgmt-vrf)# domain sec.extreme.com port 3890 retries 3
This example changes the domain in an existing configuration.
device(config)# ldap-server host 10.24.65.6 device(config-host-10.24.65.6/mgmt-vrf)# domain security.extreme.com
This example deletes an LDAP server.
device(config)# no ldap-server host 10.24.65.6
This example resets the retries attribute to the default value.
device(config)# ldap-server host 10.24.65.6 device(config-host-10.24.65.6/mgmt-vrf)# no retries
This example shows how attributes holding default values are not displayed.
device(config-host-10.24.65.6/mgmt-vrf)# do show running-config ldap-server host 10.24.65.6 ldap-server host 10.24.65.6 use-vrf mgmt-vrf port 3890 retries 3 timeout 8 basedn security.extreme.com