Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 1658 / 2164

1-24
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring Connection Profiles
Step 2
To specify the authentication method to use: AAA, digital certificates, or both, enter the authentication
command. You can specify either aaa or certificate or both, in any order.
hostname(config-tunnel-webvpn)# authentication authentication_method
hostname(config-tunnel-webvpn)#
For example, The following command allows both AAA and certificate authentication:
hostname(config-tunnel-webvpn)# authentication aaa certificate
hostname(config-tunnel-webvpn)#
Applying Customization
Customizations determine the appearance of the windows that the user sees upon login. You configure
the customization parameters as part of configuring clientless SSL VPN.
To apply a previously defined web-page customization to change the look-and-feel of the web page that
the user sees at login, enter the customization command in username webvpn configuration mode:
hostname(config-username-webvpn)# customization { none | value customization_name }
hostname(config-username-webvpn)#
For example, to use the customization named blueborder, enter the following command:
hostname(config-username-webvpn)# customization value blueborder
hostname(config-username-webvpn)#
You configure the customization itself by entering the customization command in webvpn mode.
The following example shows a command sequence that first establishes a customization named “123”
that defines a password prompt. The example then defines a clientless SSL VPN tunnel-group named
“test” and uses the
customization command to specify the use of the customization named “123”:
hostname(config)# webvpn
hostname(config-webvpn)# customization 123
hostname(config-webvpn-custom)# password-prompt Enter password
hostname(config-webvpn)# exit
hostname(config)# tunnel-group test type webvpn
hostname(config)# tunnel-group test webvpn-attributes
hostname(config-tunnel-webvpn)# customization value 123
hostname(config-tunnel-webvpn)#
Step 3
The ASA queries NetBIOS name servers to map NetBIOS names to IP addresses. Clientless SSL VPN
requires NetBIOS to access or share files on remote systems. Clientless SSL VPN uses NetBIOS and the
CIFS protocol to access or share files on remote systems. When you attempt a file-sharing connection to
a Windows computer by using its computer name, the file server you specify corresponds to a specific
NetBIOS name that identifies a resource on the network.
To make the NBNS function operational, you must configure at least one NetBIOS server (host). You
can configure up to three NBNS servers for redundancy. The ASA uses the first server on the list for
NetBIOS/CIFS name resolution. If the query fails, it uses the next server.
To specify the name of the NBNS (NetBIOS Name Service) server to use for CIFS name resolution, use
the
nbns-server command. You can enter up to three server entries. The first server you configure is the
primary server, and the others are backups, for redundancy. You can also specify whether this is a master
browser (rather than just a WINS server), the timeout interval, and the number of retries. A WINS server
or a master browser is typically on the same network as the ASA, or reachable from that network. You
must specify the timeout interval before the number of retries:
hostname(config-tunnel-webvpn)# nbns-server { host-name | IP_address } [ master ]
[ timeout seconds ] [ retry number ]
hostname(config-tunnel-webvpn)#