1-9
Cisco ASA Series CLI Configuration Guide
Appendix 1 Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
IPsec-Split-Tunneling-Policy
Y
Y
Y
Integer
Single
0 = Tunnel everything
1 = Split tunneling
2 = Local LAN permitted
IPsec-Split-Tunnel-List
Y
Y
Y
String
Single
Specifies the name of the network or
access list that describes the split
tunnel inclusion list.
IPsec-Tunnel-Type
Y
Y
Y
Integer
Single
1 = LAN-to-LAN
2 = Remote access
L2TP-Encryption
Y
Integer
Single
Bitmap:
1 = Encryption required
2 = 40 bit
4 = 128 bits
8 = Stateless-Req
15 = 40/128-Encr/Stateless-Req
L2TP-MPPC-Compression
Y
Integer
Single
0 = Disabled
1 = Enabled
MS-Client-Subnet-Mask
Y
Y
Y
String
Single
An IP address
PFS-Required
Y
Y
Y
Boolean Single
0 = No
1 = Yes
Port-Forwarding-Name
Y
Y
String
Single
Name string (for example,
“Corporate-Apps”)
PPTP-Encryption
Y
Integer
Single
Bitmap:
1 = Encryption required
2 = 40 bits
4 = 128 bits
8 = Stateless-Required
Example:
15 = 40/128-Encr/Stateless-Req
PPTP-MPPC-Compression
Y
Integer
Single
0 = Disabled
1 = Enabled
Primary-DNS
Y
Y
Y
String
Single
An IP address
Primary-WINS
Y
Y
Y
String
Single
An IP address
Privilege-Level
Integer
Single
For usernames, 0 - 15
Required-Client-
Firewall-Vendor-Code
Y
Y
Y
Integer
Single
1 = Cisco Systems (with Cisco
Integrated Client)
2 = Zone Labs
3 = NetworkICE
4 = Sygate
5 = Cisco Systems (with Cisco
Intrusion Prevention Security
Agent)
Table 1-2
ASA Supported Cisco Attributes for LDAP Authorization (continued)
Attribute Name
VPN
3000
ASA PIX
Syntax/
Type
Single or
Multi-Value
d
Possible Values
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......