Contents
xxi
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Default IPSec Remote Access Tunnel Group Configuration 30-5
Configuring IPSec Tunnel-Group General Attributes 30-6
Configuring IPSec Remote-Access Tunnel Groups 30-6
Specifying a Name and Type for the IPSec Remote Access Tunnel Group 30-6
Configuring IPSec Remote-Access Tunnel Group General Attributes 30-6
Configuring IPSec Remote-Access Tunnel Group IPSec Attributes 30-10
Configuring IPSec Remote-Access Tunnel Group PPP Attributes 30-12
Configuring LAN-to-LAN Tunnel Groups 30-13
Default LAN-to-LAN Tunnel Group Configuration 30-13
Specifying a Name and Type for a LAN-to-LAN Tunnel Group 30-13
Configuring LAN-to-LAN Tunnel Group General Attributes 30-14
Configuring LAN-to-LAN IPSec Attributes 30-14
Configuring WebVPN Tunnel Groups 30-16
Specifying a Name and Type for a WebVPN Tunnel Group 30-16
Configuring WebVPN Tunnel-Group General Attributes 30-17
Configuring WebVPN Tunnel-Group WebVPN Attributes 30-20
Customizing Login Windows for WebVPN Users 30-23
Configuring Microsoft Active Directory Settings for Password Management 30-24
Using Active Directory to Force the User to Change Password at Next Logon 30-24
Using Active Directory to Specify Maximum Password Age 30-26
Using Active Directory to Override an Account Disabled AAA Indicator 30-27
Using Active Directory to Enforce Minimum Password Length 30-28
Using Active Directory to Enforce Password Complexity 30-29
Group Policies 30-30
Default Group Policy 30-31
Configuring Group Policies 30-33
Configuring an External Group Policy 30-33
Configuring an Internal Group Policy 30-34
Configuring Group Policy Attributes 30-34
Configuring WINS and DNS Servers 30-34
Configuring VPN-Specific Attributes 30-35
Configuring Security Attributes 30-38
Configuring the Banner Message 30-40
Configuring IPSec-UDP Attributes 30-40
Configuring Split-Tunneling Attributes 30-41
Configuring Domain Attributes for Tunneling 30-42
Configuring Attributes for VPN Hardware Clients 30-44
Configuring Backup Server Attributes 30-47
Configuring Microsoft Internet Explorer Client Parameters 30-48
Configuring Network Admission Control Parameters 30-50