Cisco ASA 5505 User Manual

Page 1930

Advertising
background image

C-32

Cisco ASA 5500 Series Configuration Guide using the CLI

Appendix C Configuring an External Server for Authorization and Authentication

Configuring an External RADIUS Server

DHCP-Network-Scope

Y

Y

Y

61

String

Single

IP Address

Intercept-DHCP-Configure-Msg

Y

Y

Y

62

Boolean Single

0 = Disabled
1 = Enabled

MS-Client-Subnet-Mask

Y

Y

Y

63

Boolean Single

An IP address

Allow-Network-Extension-Mode

Y

Y

Y

64

Boolean Single

0 = Disabled
1 = Enabled

Authorization-Type

Y

Y

Y

65

Integer

Single

0 = None
1 = RADIUS
2 = LDAP

Authorization-Required

Y

66

Integer

Single

0 = No
1 = Yes

Authorization-DN-Field

Y

Y

Y

67

String

Single

Possible values: UID, OU, O,
CN, L, SP, C, EA, T, N, GN, SN,
I, GENQ, DNQ, SER,
use-entire-name

IKE-KeepAlive-Confidence-Interval

Y

Y

Y

68

Integer

Single

10 - 300 seconds

WebVPN-Content-Filter-Parameters

Y

Y

69

Integer

Single

1 = Java ActiveX
2 = Java Script
4 = Image
8 = Cookies in images

WebVPN-URL-List

Y

71

String

Single

URL-List name

WebVPN-Port-Forward-List

Y

72

String

Single

Port-Forward list name

WebVPN-Access-List

Y

73

String

Single

Access-List name

Cisco-LEAP-Bypass

Y

Y

Y

75

Integer

Single

0 = Disabled
1 = Enabled

WebVPN-Homepage

Y

Y

76

String

Single

A URL such as
http://example-example.com

Client-Type-Version-Limiting

Y

Y

Y

77

String

Single

IPsec VPN version number
string

WebVPN-Port-Forwarding-Name

Y

Y

79

String

Single

String name (example,
“Corporate-Apps”).

This text replaces the default
string, “Application Access,” on
the clientless portal home page.

IE-Proxy-Server

Y

80

String

Single

IP address

IE-Proxy-Server-Policy

Y

81

Integer

Single

1 = No Modify
2 = No Proxy
3 = Auto detect
4 = Use Concentrator Setting

Table C-7

ASA Supported RADIUS Attributes and Values (continued)

Attribute Name

VPN
3000

ASA

PIX

Attr.
No.

Syntax/
Type

Single
or
Multi-
Valued

Description or Value

Advertising