Cisco ASA 5505 Configuration Manual page 1363

Chapter 64 General VPN Setup
–
–
Attribute
C
CN
DNQ
EA
GENQ
GN
I
L
N
O
OU
SER
SN
SP
T
UID
UPN
–
–
–
–
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
OL-20339-01
Specify the certificate fields to be used as the username—Specifies one or more fields to
combine into the username.
Primary Field—Selects the first field to use from the certificate for the username. If this value
is found, the secondary field is ignored.
Secondary Field—Selects the field to us if the primary field is not found. The possible values
for the primary and secondary field attributes include the following:
Definition
Country: the two-letter country abbreviation. These codes conform to ISO
3166 country abbreviations.
Common Name: the name of a person, system, or other entity. Not available
a s a secondary attribute.
Domain Name Qualifier.
E-mail address.
Generational Qualifier.
Given Name.
Initials.
Locality: the city or town where the organization is located.
Name.
Organization: the name of the company, institution, agency, association or
other entity.
Organizational Unit: the subgroup within the organization (O).
Serial Number.
Surname.
State/Province: the state or province where the organization is located
Title.
User Identifier.
User Principal Name.
Use the entire DN as the username—Uses the entire Distinguished Name field of the certificate
as the username.
Use script to select username—Names the script from which to extract a username from the
digital certificate. The default is --None--.
Add or Edit—Opens the Add or Edit Script Content dialog box, in which you can define a script
to use in mapping the username from the certificate.
Delete—Deletes the selected script. There is no confirmation or undo.
Security Context
Transparent Single
—
•
Multiple
Context System
— —
Cisco ASA 5500 Series Configuration Guide using ASDM
Configuring SSL VPN Connections
64-53