B-13
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Appendix B Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Cisco AV Pair Attribute Syntax
The Cisco Attribute Value (AV) pair (ID# 26/9/1) can be used to enforce access lists from a Radius server
(like Cisco ACS), or from an LDAP server via an ldap-attribute-map.
The syntax of each Cisco-AV-Pair rule is as follows:
[Prefix] [Action] [Protocol] [Source] [Source Wildcard Mask] [Destination] [Destination Wildcard
Mask] [Established] [Log] [Operator] [Port]
Table B-3 describes the syntax rules.
WebVPN-Port-Forwarding-
HTTP-Proxy-Enable
Y Y Integer Single 0 = Disabled
1 = Enabled
WebVPN-Single-Sign-On-
Server-Name
Y String Single Name of the SSO Server (1 - 31
characters).
WebVPN-SVC-Client-DPD Y Y Integer Single 0 = Disabled
n = Dead Peer Detection value in
seconds (30 - 3600)
WebVPN-SVC-Compression Y Y Integer Single 0 = None
1 = Deflate Compression
WebVPN-SVC-Enable Y Y Integer Single 0 = Disabled
1 = Enabled
WebVPN-SVC-Gateway-DPD Y Y Integer Single 0 = Disabled
n = Dead Peer Detection value in
seconds (30 - 3600)
WebVPN-SVC-Keepalive Y Y Integer Single 0 = Disabled
n = Keepalive value in seconds (15 -
600)
WebVPN-SVC-Keep-Enable Y Y Integer Single 0 = Disabled
1 = Enabled
WebVPN-SVC-Rekey-Method Y Y Integer Single 0 = None
1 = SSL
2 = New tunnel
3 = Any (sets to SSL)
WebVPN-SVC-Rekey-Period Y Y Integer Single 0 = Disabled
n = Retry period in minutes
(4 - 10080)
WebVPN-SVC-Required-Enable Y Y Integer Single 0 = Disabled
1 = Enabled
WebVPN-URL-Entry-Enable Y Y Integer Single 0 = Disabled
1 = Enabled
WebVPN-URL-List Y String Single URL-list name
Table B-2 Security Appliance Supported Cisco Attributes for LDAP Authorization (continued)
Attribute Name/ VPN 3000 ASA PIX
Syntax/
Type
Single or
Multi-Valued Possible Values
To Next Page
Loading...
Need help?
General
