Cisco ASA 5505 Configuration Manual page 1746

Configuring an External LDAP Server
Table B-3
Field
Prefix
Action
Protocol
Source
Source Wildcard Mask
Destination
Destination Wildcard
Mask
Log
Operator
Port
Cisco ASA 5500 Series Configuration Guide using ASDM
B-14
Appendix B
AV-Pair Attribute Syntax Rules
Description
A unique identifier for the AV pair. For example:
access lists) or
webvpn:inacl#
field only appears when the filter has been sent as an AV pair.
Action to perform if rule matches: deny, permit.
Number or name of an IP protocol. Either an integer in the range 0 - 255 or
one of the following keywords: icmp, igmp, ip, tcp, udp.
Network or host that sends the packet. Specify it as an IP address, a
hostname, or the keyword "any." If using an IP address, the source wildcard
mask must follow. This field does not apply to Clientless SSL VPN because
the adaptive security appliance plays the role of the source/proxy
The wildcard mask that applies to the source address. This field does not
apply to Clientless SSL VPN because the adaptive security appliance plays
the role of the source/proxy
Network or host that receives the packet. Specify as an IP address, a
hostname, or the keyword "any." If using an IP address, the source wildcard
mask must follow.
The wildcard mask that applies to the destination address.
Generates a FILTER log message. You must use this keyword to generate
events of severity level 9.
Logic operators: greater than, less than, equal to, not equal to.
The number of a TCP or UDP port in the range 0 - 65535.
Configuring an External Server for Authorization and Authentication
(for clientless SSL VPN access lists). This
(for standard
ip:inacl#1=
OL-20339-01