Configuring LDAP Authentication Server for a WLAN SSID Profile

To configure an LDAP Lightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. authentication server for the WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile, complete the following steps:

  1. To access the WLAN SSID configuration wizard for a new SSID profile or an existing SSID profile, see Configuring a WLAN SSID Profile in Bridge Mode or Configuring a WLAN SSID Profile in Tunnel and Mixed Mode.
  2. In the WLAN SSID configuration wizard, click the Security tab.
  3. In Security Level, select Enterprise.
  4. Perform one of the following actions:

    • To add a new external authentication server, click + next to Primary Server or Secondary Server.

      The New Server pop-up window is displayed.

    • To edit an existing external authentication server, click the edit icon next to Primary Server or Secondary Server.

      The Edit Server pop-up window is displayed.

  5. Configure the parameters described in Table 1.
  6. Click OK.

    The following table describes the parameters to create LDAP authentication servers for a WLAN SSID profile.

    Table 1: LDAP Authentication Server Configuration

    Parameter

    Description

    Server Type

    Select LDAP from the drop-down list.

    Name

    Enter a name for the LDAP server.

    IP Address

    Enter an IP address of the LDAP server.

    Admin-Distinguished-Name

    Enter a distinguished name for the admin user with read and search privileges across all the entries in the LDAP database.

    The admin user need not have write privileges, but the admin user must be able to search the database, and read attributes of other users in the database.

    Admin Password and Retype Admin Password

    Enter a password for the admin user.

    Timeout

    Enter a timeout interval within a range of 1–30 seconds for one RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  request.

    The default value is 5.

    Retry Count

    Enter the maximum number of authentication requests that can be sent to the server group. You can specify a value within the range of 1–5.

    The default value is 3.

    Auth Port

    Enter an authorization port number of the LDAP server.

    The default value is 389.

    Base-Distinguished-Name

    Enter a distinguished name for the node that contains the entire user database.

    Filter

    Enter the filter to apply when searching for a user in the LDAP database.

    The default filter string is (objectclass=*).

    Key Attribute

    Enter the attribute to use as a key while searching for the LDAP server.

    For Active Directory Microsoft Active Directory. The directory server that stores information about a variety of things, such as organizations, sites, systems, users, shares, and other network objects or components. It also provides authentication and authorization mechanisms, and a framework within which related services can be deployed., the value is sAMAccountName.