Cisco ASA Series

1-32
Cisco ASA Series CLI Configuration Guide
Appendix 1 Configuring an External Server for Authorization and Authentication
Configuring an External RADIUS Server
Required-Client-Firewall-Product-Code Y 46 Integer Single Cisco Systems Products:
1 = Cisco Intrusion Prevention Security
Agent or Cisco Integrated Client (CIC)
Zone Labs Products:
1 = Zone Alarm
2 = Zone AlarmPro
3 = Zone Labs Integrity
NetworkICE Product:
1 = BlackIce Defender/Agent
Sygate Products:
1 = Personal Firewall
2 = Personal Firewall Pro
3 = Security Agent
Required-Individual-User-Auth Y 49 Integer Single 0 = Disabled
1 = Enabled
Require-HW-Client-Auth Y 48 Boolean Single 0 = Disabled
1 = Enabled
Secondary-DNS Y 6 String Single An IP address
Secondary-WINS Y 8 String Single An IP address
SEP-Card-Assignment 9 Integer Single Not used
Session Subtype Y 152 Integer Single 0 = None
1 = Clientless
2 = Client
3 = Client Only
Session Subtype applies only when the
Session Type (151) attribute has the
following values: 1, 2, 3, and 4.
Session Type Y 151 Integer Single 0 = None
1 = AnyConnect Client SSL VPN
2 = AnyConnect Client IPSec VPN (IKEv2)
3 = Clientless SSL VPN
4 = Clientless Email Proxy
5 = Cisco VPN Client (IKEv1)
6 = IKEv1 LAN-LAN
7 = IKEv2 LAN-LAN
8 = VPN Load Balancing
Simultaneous-Logins Y 2 Integer Single 0 - 2147483647
Smart-Tunnel Y 136 String Single Name of a Smart Tunnel
Smart-Tunnel-Auto Y 138 Integer Single 0 = Disabled
1 = Enabled
2 = AutoStart
Table 1-7 ASA Supported RADIUS Attributes and Values (continued)
Attribute Name ASA
Attr.
No.
Syntax/
Type
Single
or
Multi-
Valued Description or Value