Skip to content

Login Domain

Location in GUI: Admin » AAA » Authentication » AAA

Diagram

Diagram

Classes

aaa (apic.fabric_policies)

NameTypeConstraintMandatoryDefault Value
login_domainsList[login_domains]No

login_domains (apic.fabric_policies.aaa)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
realmChoicelocal, tacacs, ldap, radiusYes
descriptionStringRegex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$No
auth_choiceChoiceCiscoAVPair, LdapGroupMapNoCiscoAVPair
ldap_group_mapStringRegex: ^[a-zA-Z0-9_.:-]{1,31}$No
tacacs_providersList[tacacs_providers]No
ldap_providersList[ldap_providers]No
radius_providersList[radius_providers]No

tacacs_providers (apic.fabric_policies.aaa.login_domains)

NameTypeConstraintMandatoryDefault Value
hostname_ipAnyString[Regex: ^[a-zA-Z0-9:][a-zA-Z0-9.:-]{0,254}$] or IPYes
priorityIntegermin: 0, max: 16No0

ldap_providers (apic.fabric_policies.aaa.login_domains)

NameTypeConstraintMandatoryDefault Value
hostname_ipAnyString[Regex: ^[a-zA-Z0-9:][a-zA-Z0-9.:-]{0,254}$] or IPYes
priorityIntegermin: 0, max: 16No0

radius_providers (apic.fabric_policies.aaa.login_domains)

NameTypeConstraintMandatoryDefault Value
hostname_ipAnyString[Regex: ^[a-zA-Z0-9:][a-zA-Z0-9.:-]{0,254}$] or IPYes
priorityIntegermin: 0, max: 16No0

Examples

apic:
fabric_policies:
aaa:
login_domains:
- name: tacacs
realm: tacacs
description: login domain tacacs
tacacs_providers:
- hostname_ip: 1.1.1.1
priority: 1
- name: radius
realm: radius
description: login domain radius
radius_providers:
- hostname_ip: 3.3.3.1
priority: 1
- name: ldap
realm: ldap
description: login domain ldap
auth_choice: LdapGroupMap
ldap_group_map: test-users-map
ldap_providers:
- hostname_ip: 2.2.2.2
priority: 1