Cisco 500 Series, Configuration Manual

Page: 1085 / 1140

E-35
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Appendix E Configuring an External Server for Authorization and Authentication
Configuring an External RADIUS Server
IPSec-Allow-Passwd-Store Y Y Y 16 Boolean Single 0 = Disabled
1 = Enabled
Use-Client-Address Y 17 Boolean Single 0 = Disabled
1 = Enabled
PPTP-Encryption Y 20 Integer Single Bitmap:
1 = Encryption required
2 = 40 bits
4 = 128 bits
8 = Stateless-Required
15 =
40/128-Encr/Stateless-Req
L2TP-Encryption Y 21 Integer Single Bitmap:
1 = Encryption required
2 = 40 bit
4 = 128 bits
8 = Stateless-Req
15 =
40/128-Encr/Stateless-Req
IPSec-Split-Tunnel-List Y Y Y 27 String Single Specifies the name of the
network or access list that
describes the split tunnel
inclusion list
IPSec-Default-Domain Y Y Y 28 String Single Specifies the single default
domain name to send to the
client (1-255 characters)
IPSec-Split-DNS-Names Y Y Y 29 String Single Specifies the list of secondary
domain names to send to the
client (1-255 characters)
IPSec-Tunnel-Type Y Y Y 30 Integer Single 1 = LAN-to-LAN
2 = Remote access
IPSec-Mode-Config Y Y Y 31 Boolean Single 0 = Disabled
1 = Enabled
IPSec-User-Group-Lock Y 33 Boolean Single 0 = Disabled
1 = Enabled
IPSec-Over-UDP Y Y Y 34 Boolean Single 0 = Disabled
1 = Enabled
Table E-6 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
VPN
3000
ASA PIX
Attr.
# Syntax/
Type
Single
or
Multi-
Valued
Description or Value