Cisco ASA 5505 Configuration Manual page 1275

Chapter 62 VPN
New Authentication Server Group
User the New Authentication Server Group pane to define one or more new AAA servers.
Fields
To configure a new AAA server group that contains just one server, provide the following information:
•
•
•
•
•
•
To add more servers to this new group, or to change other AAA server settings, go to Configuration >
Features > Properties > AAA.
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
User Accounts
Use the User Accounts pane to add new users to the adaptive security appliance internal user database
for authentication purposes.
Fields
Provide the following information:
•
•
•
•
OL-20339-01
Server Group Name—Type a name for the server group. You associate this name with users whom
you want to authenticate using this server.
Authentication Protocol—Select the authentication protocol the server uses. Options include
TACACS+, RADIUS, SDI, NT, and Kerberos.
Server IP Address—Type the IP address for the AAA server.
Interface—Choose the adaptive security appliance interface on which the AAA server resides.
Server Secret Key—Type a case-sensitive, alphanumeric keyword of up to 127 characters. The
server and adaptive security appliance use the key to encrypt data that travels between them. The
key must be the same on both the adaptive security appliance and server. You can use special
characters, but not spaces.
Confirm Server Secret Key—Type the secret key again.
Security Context
Transparent Single
—
•
Use the fields in this section to add a user.
– Username—Enter the username.
– Password—(Optional) Enter a password.
– Confirm Password—(Optional) Reenter the password.
Change user password—Check to change the user password.
User authentication using MSCHAP—Check to use MS-CHAP for user authentication.
Add—Click to add a user to the database after you have entered the username and optional
password.
Multiple
Context System
— —
Cisco ASA 5500 Series Configuration Guide using ASDM
VPN Wizard
62-11