[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Directory Connection Properties

Use the following configuration statements to configure directory properties for a component:

slot number component-name initial directory-connection {
url url ;
backup-urls [ backup-urls ...];
principal principal ;
credentials credentials ;
protocol (ldaps);
timeout timeout ;
check-interval check-interval ;
blacklist;
snmp-agent;
}

To configure directory connection properties for a component:

  1. From configuration mode, access the configuration statement that specifies the directory configuration for a component on a slot.
    user@host# edit slot number component initial directory-connection

    For example:

    user@host# edit slot 0 nic initial directory-connection
  2. Specify the URL that identifies the location of the primary directory server.
    [edit slot 0 nic initial directory-connection]
    user@host# set url url

    On a C-series Controller, this value is ldap://127.0.0.1:389.

  3. (Optional) Specify URLs that identify the locations of backup directory servers. Backup servers are used if the primary directory server is not accessible.
    [edit slot 0 nic initial directory-connection]
    user@host# set backup-urls directory-backup-url1 directory-backup-url2
  4. Specify the DN that the SRC component uses for authentication to access the directory.
    [edit slot 0 nic initial directory-connection]
    user@host# set principal principal
  5. Specify the password with which the SRC component accesses the directory.
    [edit slot 0 nic initial directory-connection]
    user@host# set credentials credentials
  6. (Optional) Specify whether the connection to the directory uses secure LDAP. If you do not configure a security protocol, plain socket is used.
    [edit slot 0 nic initial directory-connection]
    user@host# set protocol ldaps
  7. (Optional) Specify the maximum amount of time during which the directory must respond to a connection request.
    [edit slot 0 nic initial directory-connection]
    user@host# set timeout timeout
  8. (Optional) Specify the time interval at which the software attempts to connect to the directory.
    [edit slot 0 nic initial directory-connection]
    user@host# set check-interval check-interval
  9. (Optional) Enable the directory eventing system to prevent a connection to a directory after the directory fails to respond during an interval in which the directory was polled 10 times.
    [edit slot 0 nic initial directory-connection]
    user@host# set blacklist
  10. Specify that the SDX SNMP agent exports MIBs for this directory connection.
    [edit slot 0 nic initial directory-connection]
    user@host# set snmp-agent

Related Topics

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.