Forum Discussion

Andy_Cohen_4986's avatar
Andy_Cohen_4986
Icon for Nimbostratus rankNimbostratus
Apr 08, 2015

Configuring intermediate VS for LDAP/LDAPS HA

Hi,   I have successfully configured an LDAP AAA profile with a single server, and created an associated access profile with an interactive login page and LDAP Auth and LDAP Query functions to cor...
BIG-IP Access Policy Manager (APM)
deployment
ha
security
Gianrico_D_Ang1's avatar
Gianrico_D_Ang1
Historic F5 Account
Apr 08, 2015

I now want to add additional servers via an LDAP AAA pool in order to provide some resiliency.

 

You can simply select "use pool" in the LDAP AAA server configuration and add multiple servers there. When the first server does not respond the second will be tried and so on.

 

I do not understand why you're trying to do it differently.

 

thanks gianrico

 

  • Andy_Cohen_4986's avatar
    Andy_Cohen_4986
    Icon for Nimbostratus rankNimbostratus
    Jul 28, 2015
    Gianrico, yes, you can use pool and apply the server IPs here, but that is only half of the configuration. Have you tried setting this up yourself? In selecting the "use pool" option, an LTM pool is created with the servers you list. However, you then need to create a Virtual Server as I mentioned above, that forwards to this newly created pool for this functionality to work. In the end my issue was simply a firewall one, but I wasn't sure that the implementation of the LDAP pool that I had outlined in my first post was correct. It was, and the loopback call in the logs is the expected outcome.