Cisco ASA Series

1-10
Cisco ASA Series CLI Configuration Guide
Appendix 1 Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Required-Client-Firewall-
Description
Y Y Y String Single —
Required-Client-Firewall-
Product-Code
Y Y Y Integer Single Cisco Systems Products:
1 = Cisco Intrusion Prevention
Security Agent or Cisco Integrated
Client (CIC)
Zone Labs Products:
1 = Zone Alarm
2 = Zone AlarmPro
3 = Zone Labs Integrity
NetworkICE Product:
1 = BlackIce Defender/Agent
Sygate Products:
1 = Personal Firewall
2 = Personal Firewall Pro
3 = Security Agent
Require-HW-Client-Auth Y Y Y Boolean Single 0 = Disabled
1 = Enabled
Require-Individual-User-Auth Y Y Y Integer Single 0 = Disabled
1 = Enabled
Secondary-DNS Y Y Y String Single An IP address
Secondary-WINS Y Y Y String Single An IP address
SEP-Card-Assignment Integer Single Not used
Simultaneous-Logins Y Y Y Integer Single 0 - 2147483647
Strip-Realm Y Y Y Boolean Single 0 = Disabled
1 = Enabled
TACACS-Authtype Y Y Y Interger Single —
TACACS-Privilege-Level Y Y Y Interger Single —
Tunnel-Group-Lock Y Y String Single Name of the tunnel group or “none”
Tunneling-Protocols Y Y Y Integer Single 1 = PPTP
2 = L2TP
4 = IPSec (IKEv1)
8 = L2TP/IPSec
16 = WebVPN
32 = SVC
64 = IPsec (IKEv2)
8 and 4 are mutually exclusive
(0 - 11, 16 - 27, 32 - 43, 48 - 59 are
legal values).
Table 1-2 ASA Supported Cisco Attributes for LDAP Authorization (continued)
Attribute Name
VPN
3000 ASA PIX
Syntax/
Type
Single or
Multi-Value
dPossible Values