Cisco 500 Series, Configuration Manual

Page: 37 / 1140

Contents
xxxvii
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
IPv6 Address Prefixes
D-10
Protocols and Applications
D-11
TCP and UDP Ports
D-11
Local Ports and Protocols
D-14
ICMP Types
D-15
A P P E N D I X
E
Configuring an External Server for Authorization and Authentication
E-1
Selecting LDAP, RADIUS, or Local Authentication and Authorization
E-1
Understanding Policy Enforcement of Permissions and Attributes
E-2
Configuring an External LDAP Server
E-2
Reviewing the LDAP Directory Structure and Configuration Procedure
E-3
Organizing the Security Appliance LDAP Schema
E-3
Searching the Hierarchy
E-4
Binding the Security Appliance to the LDAP Server
E-5
Defining the Security Appliance LDAP Schema
E-5
Cisco-AV-Pair Attribute Syntax
E-13
Example Security Appliance Authorization Schema
E-15
Loading the Schema in the LDAP Server
E-17
Defining User Permissions
E-17
Example User File
E-18
Reviewing Examples of Active Directory Configurations
E-18
Example 1: Configuring LDAP Authorization with Microsoft Active Directory (ASA/PIX)
E-18
Example 2: Configuring LDAP Authentication with Microsoft Active Directory
E-20
Example 3: LDAP Authentication and LDAP Authorization with Microsoft Active Directory
E-22
Configuring an External RADIUS Server
E-24
Reviewing the RADIUS Configuration Procedure
E-24
Security Appliance RADIUS Authorization Attributes
E-25
Configuring an External RADIUS Server
E-33
Reviewing the RADIUS Configuration Procedure
E-33
Security Appliance RADIUS Authorization Attributes
E-34
Security Appliance Attributes
E-40
G
L O S S A R Y
I
N D E X