This Article Applies to:

 

Omada routers in Controller mode. Omada Controller versions with Google LDAP enabled.

 

Configuration Steps:

 

1. Configure Google LDAP. Go to Settings > Profiles > LDAP Profiles.

 

 

Status: Enable the LDAP profile.
Name: Can be filled in arbitrarily, but should not contain special characters.
Server Address: For accessing Google LDAP, enter ldap.google.com.
Destination Port: For accessing Google LDAP, the default port is 636.
Account & Password: Fill in according to the actual configuration of Google LDAP.
Common Name Identifier: Depends on the type of authentication required. If it's for a user, enter "uid". Fill in according to your actual needs.
Base Distinguished Name: After filling in all configurations and importing the certificate, click "Search" and select the path.
Additional Filter: Optional field for filtering LDAP search results.
Google Certificate: Import the certificate in .zip format, containing both .crt and .key files.

After completing the configuration, click Apply to save and deploy the settings.

 

2. Configure the OVPN server. Go to Settings > VPN > VPN.

 

Configure the Authentication Mode as LDAP and choose the LDAP you just created.

Other parameters should be chosen based on your requirements.

 

 

Verification:

 

Configure the OVPN Client on another router.

 

Mode: Certificate+Account.

Username and Password: the Google LDAP preconfigured username and password.

Configuration: Import the Certificate from the OVPN server.