B-33
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Appendix B Configuring an External Server for Authorization and Authentication
Configuring an External RADIUS Server
L2TP-MPPC-Compression Y 38 Integer Single 0 = Disabled
1 = Enabled
IPSec-IP-Compression YYY39IntegerSingle0 = Disabled
1 = Enabled
IPSec-IKE-Peer-ID-Check YYY40IntegerSingle1 = Required
2 = If supported by peer
certificate
3 = Do not check
IKE-Keep-Alives YYY41BooleanSingle0 = Disabled
1 = Enabled
IPSec-Auth-On-Rekey YYY42BooleanSingle0 = Disabled
1 = Enabled
Required-Client- Firewall-Vendor-Code YYY45IntegerSingle1 = Cisco Systems (with Cisco
Integrated Client)
2 = Zone Labs
3 = NetworkICE
4 = Sygate
5 = Cisco Systems (with Cisco
Intrusion Prevention Security
Agent)
Required-Client-Firewall-Product-Code YYY46IntegerSingleCisco Systems Products:
1 = Cisco Intrusion Prevention
Security Agent or Cisco
Integrated Client (CIC)
Zone Labs Products:
1 = Zone Alarm
2 = Zone AlarmPro
3 = Zone Labs Integrity
NetworkICE Product:
1 = BlackIce Defender/Agent
Sygate Products:
1 = Personal Firewall
2 = Personal Firewall Pro
3 = Security Agent
Required-Client-Firewall-Description YYY47String SingleString
Require-HW-Client-Auth YYY48BooleanSingle0 = Disabled
1 = Enabled
Required-Individual-User-Auth YYY49IntegerSingle0 = Disabled
1 = Enabled
Authenticated-User-Idle-Timeout YYY50IntegerSingle1-35791394 minutes
Table B-7 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
VPN
3000 ASA PIX
Attr.
#
Syntax/
Type
Single
or
Multi-
Valued Description or Value
To Next Page
Loading...
