LDAP supports on catalyst switch for CLI admin (exec) authentication

michaelzhq · ‎03-24-2017

Does IOS on catalyst switch support LDAP authentication for CLI admin (exec) login ? I've checked numerous configuration guides, but couldn't find a clear answer.

Thanks!

marce1000 · ‎03-24-2017

I found several references if I google on :

cisco switch ldap authentication

But it seems that it works only for recent IOS or XE versions.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Marvin Rhoads · ‎03-25-2017

Cisco ISE as the TACACS+ server would be the way to go.

It can use LDAP (among others) as the backend identity store.

That will be compatible with any devices that supports either TACACS or RADIUS AAA servers ( I.e. almost any managed Cisco IOS-based device).