You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.
Disable the suffix.
$ dsconf set-suffix-prop -h host -p port suffix-DN enabled:off |
You cannot disable a suffix on which replication is enabled because most properties of a replicated suffix are determined by the replication mechanism.
Enable the suffix.
$ dsconf set-suffix-prop -h host -p port suffix-DN enabled:on |