Specifications

Administrator and User Access 6-7
6.2.2 Configuring Lightweight Directory Access Protocol (LDAP) Authentication
When the RADIUS Data Source is set to use an external LDAP server (see Configuring the RADIUS Server),
the LDAP screen is used to provide information about the external LDAP server. Select [User
Authentication] --> RADIUS Server --> LDAP The fields on this screen are only available when LDAP or
LDAPS is set as the data source for the RADIUS server.
1. Fill out the LDAP Configuration area to allow the switch to work with the LDAP server. Consult with the
LDAP server administrator for details on how to set the values for the fields in this screen.
Fully Qualified Domain
Name
Enter the fully qualified domain name of the external LDAP server. This server will
act as the data source for the RADIUS server. This server must be accessible from
the WAN port or from an active subnet on the switch.
LDAP Server IP Enter the IP address of the external LDAP server that will act as the data source for
the RADIUS server. This server must be accessible from the WAN port or from an
active subnet on the switch.
Port Enter the TCP/IP port number for the LDAP server that will act as a data source. The
default port is 389.
Login Attribute Enter the login attribute used by your LDAP server for authentication. In most cases,
the default value in this field should work.
Password Attribute Enter the password attribute used by your LDAP server for authentication.
Bind Distinguished Name Specify the distinguished name to bind with the LDAP server.
Password Enter a valid password for the LDAP server.
Base Distinguished Name Specify a distinguished name that establishes the base object for the search. The
base object is the point in the LDAP tree at which to start searching.
Group Attribute Specify the group attribute used by your LDAP server.
Group Filter Specify the group filters used by your LDAP server.