Forum Discussion

mnu9_196337's avatar
mnu9_196337
Icon for Nimbostratus rankNimbostratus
Apr 08, 2015

To keep things simple at this stage, I am not introducing SSL

I have successfully configured an LDAP AAA profile with a single server, and created an associated access profile with an interactive login page and LDAP Auth and LDAP Query functions to correctly authenticate and query a Windows AD server.

 

I now want to add additional servers via an LDAP AAA pool in order to provide some resiliency. I am following the guides but coming unstuck with the logic on how the HA works. My understanding is that you create the pool in the Access AAA configuration, which creates an LTM pool for the servers. You then create a Virtual Server which load balances to this pool (and in the case of LDAPS encrypts traffic with a Server SSL profile)

 

1 Reply

  • what you describe it pretty much right. but with APM you can usually do this in two ways. either directly via APM where you let APM create a pool with server for you. but this won't do load balancing, they do priority groups, so only when the first server fails, the second is used.

     

    you can also create a pool yourself, create a virtual server and use the IP from the virtual server in your AAA config as direct.