Configuring Access to Policy Data

Use the following configuration statements to configure access to policy data:

shared sae configuration ldap policy-data {
policy-dn policy-dn ;
parameter-dn parameter-dn ;
directory-eventing;
polling-interval polling-interval ;
}

To configure SAE access to subscriber data:

  1. From configuration mode, access the configuration statement that configures SAE access to policy data in the directory. In this sample procedure, the policy data is configured in the se-region group.
      user@host# edit shared sae group se-region configuration ldap policy-data
  2. Specify the subtree in the directory in which policy data stored.
      [edit shared sae group se-region configuration ldap policy-data]
      user@host# set policy-dn policy-dn
  3. Specify the subtree in the directory in which policy parameter data is cached.
      [edit shared sae group se-region configuration ldap policy-data]
      user@host# set parameter-dn parameter-dn
  4. (Optional) Enable or disable automatic discovery of changes to policy data.
      [edit shared sae group se-region configuration ldap policy-data]
      user@host# set directory-eventing
  5. Set the frequency for checking the directory for updates.
      [edit shared sae group se-region configuration ldap policy-data]
      user@host# set polling-interval polling-interval
  6. (Optional) Verify your configuration. 
    [edit shared sae group se-region configuration ldap policy-data]
user@host# show
policy-dn o=Policy,<base>;
parameter-dn o-Parameters,<base>;
directory-eventing;
polling-interval 30;