Cisco ASA 5505 Configuration Manual page 1740

Configuring an External LDAP Server
Table B-2 Security Appliance Supported Cisco Attributes for LDAP Authorization (continued)
Attribute Name/
IE-Proxy-Method
IE-Proxy-Server
IETF-Radius-Class
IETF-Radius-Filter-Id
IETF-Radius-Framed-IP-Address
IETF-Radius-Framed-IP-Netmask
IETF-Radius-Idle-Timeout
IETF-Radius-Service-Type
IETF-Radius-Session-Timeout
IKE-Keep-Alives
IPSec-Allow-Passwd-Store
IPSec-Authentication
IPSec-Auth-On-Rekey
IPSec-Backup-Server-List
Cisco ASA 5500 Series Configuration Guide using ASDM
B-8
Appendix B
Syntax/
VPN 3000 ASA PIX Type
Y Y Y Integer
Y Y Y Integer
Y Y Y
Y Y Y String
Y Y Y String
Y Y Y String
Y Y Y Integer
Y Y Y Integer
Y Y Y Integer
Y Y Y Boolean Single
Y Y Y Boolean Single
Y Y Y Integer
Y Y Y Boolean Single
Y Y Y String
Configuring an External Server for Authorization and Authentication
Single or
Multi-Valued Possible Values
Single 1 = Do not modify proxy settings
2 = Do not use proxy
3 = Auto detect
4 = Use adaptive security appliance
setting
Single IP Address
Single Sets the group policy for the remote
access VPN session. For version 8.2
and later, we recommend that you
use the Group-Policy attribute. You
can use one of the three following
formats:
<group policy name>
•
OU=<group policy name>
•
OU=<group policy name>;
•
Single access list name that is defined on
the adaptive security appliance
Single An IP address
Single An IP address mask
Single seconds
Single 1 = Login
2 = Framed
6 = Administrative
7 = NAS Prompt
Single seconds
0 = Disabled
1 = Enabled
0 = Disabled
1 = Enabled
Single 0 = None
1 = RADIUS
2 = LDAP (authorization only)
3 = NT Domain
4 = SDI (RSA)
5 = Internal
6 = RADIUS with Expiry
7 = Kerberos/Active Directory
0 = Disabled
1 = Enabled
Single Server Addresses (space delimited)
OL-20339-01