1-16
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring Connection Profiles
Configuring IPsec Remote-Access Connection Profile PPP Attributes
To configure the Point-to-Point Protocol attributes for a remote-access connection profile, perform the
following steps. PPP attributes apply
only
to IPsec remote-access connection profiles. The following
description assumes that you have already created the IPsec remote-access connection profile.
Step 1
Enter tunnel-group ppp-attributes configuration mode, in which you configure the remote-access
tunnel-group PPP attributes, by entering the following command. The prompt changes to indicate the
mode change:
hostname(config)#
tunnel-group
tunnel-group-name
type remote-access
hostname(config)#
tunnel-group
tunnel-group-name
ppp-attributes
hostname(config-tunnel-ppp)#
For example, the following command designates that the tunnel-group ppp-attributes mode commands
that follow pertain to the connection profile named TG1. Notice that the prompt changes to indicate that
you are now in tunnel-group ppp-attributes mode:
hostname(config)#
tunnel-group
TG1
type remote-access
hostname(config)#
tunnel-group
TG1
ppp-attributes
hostname(config-tunnel-ppp)#
Step 2
Specify whether to enable authentication using specific protocols for the PPP connection. The protocol
value can be any of the following:
•
pap—Enables the use of Password Authentication Protocol for the PPP connection.
•
chap—Enables the use of Challenge Handshake Authentication Protocol for the PPP connection.
•
ms-chap-v1 or ms-chap-v2—Enables the use of Microsoft Challenge Handshake Authentication
Protocol, version 1 or version 2 for the PPP connection.
•
eap—Enables the use of Extensible Authentication protocol for the PPP connection.
CHAP and MSCHAPv1 are enabled by default.
The syntax of this command is:
hostname(config-tunnel-ppp)#
authentication
protocol
hostname(config-tunnel-ppp)#
To disable authentication for a specific protocol, use the
no
form of the command:
hostname(config-tunnel-ppp)#
no
authentication
protocol
hostname(config-tunnel-ppp)#
For example, the following command enables the use of the PAP protocol for a PPP connection:
hostname(config-tunnel-ppp)#
authentication pap
hostname(config-tunnel-ppp)#
The following command enables the use of the MS-CHAP, version 2 protocol for a PPP connection:
hostname(config-tunnel-ppp)#
authentication ms-chap-v2
hostname(config-tunnel-ppp)#
The following command enables the use of the EAP-PROXY protocol for a PPP connection:
hostname(config-tunnel-ppp)#
authentication pap
hostname(config-tunnel-ppp)#
The following command disables the use of the MS-CHAP, version 1 protocol for a PPP connection:
hostname(config-tunnel-ppp)#
no
authentication ms-chap-v1
hostname(config-tunnel-ppp)#
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......