Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-58
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Configuring Application Access
Command Purpose
webvpn
Switches to webvpn configuration mode.
smart-tunnel auto-signon list [use-domain] [realm
realm-string] [port port-num]{ip ip-address
[netmask] | host hostname-mask}
Use for each server you want to add to the server list
• list —names the list of remote servers. Use
quotation marks around the name if it includes a
space. The string can be up to 64 characters. The
ASA creates the list if it is not already present in
the configuration. Otherwise, it adds the entry to
the list. Assign a name that will help you to
distinguish.
• use-domain (optional)—Adds the Windows
domain to the username if authentication
requires it. If you enter this keyword, be sure to
specify the domain name when assigning the
smart tunnel list to one or more group policies,
or usernames.
• realm—Configures a realm for the
authentication. Realm is associated with the
protected area of the website and is passed back
to the browser either in the authentication
prompt or in the HTTP headers during
authentication. Once auto-sign is configured
and a realm string is specified, users can
configure the realm string on a web application
(such as Outlook Web Access) and access web
applications without signing on
• port—Specifies which port performs auto
sign-on. For Firefox, if no port number is
specified, auto sign is performed on HTTP and
HTTPS, accessed by the default port numbers
80 and 443 respectively.
• ip—Specifies the server by its IP address and
netmask.
• ip-address[netmask]—Identifies the
sub-network of hosts to auto-authenticate to.
• host—Specifies the server by its host name or
wildcard mask. Using this option protects the
configuration from dynamic changes to IP
addresses.
• hostname-mask—Specifies which host name or
wildcard mask to auto-authenticate to.
(Optional)
[no] smart-tunnel auto-signon list [use-domain] [realm
realm-string] [port port-num] {ip
ip-address
[netmask]
| host hostname-mask}
Removes an entry from the list of servers, specifying
both the list and IP address or hostname as it appears
in the ASA configuration.
show running-config webvpn smart-tunnel
Displays the smart tunnel auto sign-on list entries.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English