Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

B-19
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Appendix B Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Step 2 Create an LDAP attribute map on the adaptive security appliance:
The following example creates the map Banner, and maps the AD/LDAP attribute
physicalDeliveryOfficeName to the Cisco attribute Banner1:
hostname(config)# ldap attribute-map Banner
hostname(config-ldap-attribute-map)# map-name physicalDeliveryOfficeName Banner1
Step 3 Associate the LDAP attribute map to the AAA server.
The following example enters the aaa server host configuration more for the host 3.3.3.4, in the AAA
server group MS_LDAP, and associates the attribute map Banner that you created in step 2:
hostname(config)# aaa-server MS_LDAP host 3.3.3.4
hostname(config-aaa-server-host)# ldap-attribute-map Banner
Step 4 Test the banner enforcement.
This example shows a clientless SSL connection and the banner enforced through the attribute map after
the user authenticates (Figure B-4).
Figure B-4 Banner Displayed

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English