Dell 6.2 manual Configuring a TACACS+ Server

Parameter	Description
	Default: 389
Base-DN	Distinguished Name of the node that contains the entire user database.
	Default: N/A
Filter	A string that is used to search for users in the LDAP database. The default filter string is:
	(objectclass=*).
	Default: N/A
Key Attribute	A string that is used to search for a LDAP server. For Active Directory, the value is
	sAMAccountName.
	Default: sAMAccountName
Timeout	Timeout period of a LDAP request, in seconds.
	Default: 20 seconds
Mode	Enables or disables the server.
	Default: enabled
Preferred Connection	Preferred type of connection between the controller and the LDAP server. The default order of
Type	connection type is:
	1.	ldap-s
	2.	start-tls
	3.	clear-text
	The controller first tries to contact the LDAP server using the preferred connection type, and only
	attempts to use a lower-priority connection type if the first attempt is not successful.
	NOTE: If you select clear-textas the preferred connection type, you must also enable the allow-
	cleartext option.

Using the WebUI

1.Navigate to the Configuration > Security > Authentication > Servers page.

2.Select LDAP Server to display the LDAP Server List.

3.To configure an LDAP server, enter the name for the server and click Add.

4.Select the name to configure server parameters. Enter parameters as described in Table 50. Select the Mode checkbox to activate the authentication server.

5.Click Apply to apply the configuration.

NOTE: The configuration does not take effect until you perform this step.

Using the CLI

(host)(config) #aaa authentication-server ldap <name> host <ipaddr>

(enter parameters as described in Table 50)

enable

Configuring a TACACS+ Server

Table 51 defines the TACACS+ server parameters.

173 Authentication Servers Dell PowerConnect W-Series ArubaOS 6.2 User Guide