Cisco ASA Series Cli Configuration Manual page 2129

Appendix 1 Configuring an External Server for Authorization and Authentication
Note
As an LDAP client, the ASA does not support the transmission of anonymous binds or requests.
Defining the ASA LDAP Configuration
This section describes how to define the LDAP AV-pair attribute syntax and includes the following
topics:
•
•
•
Note
The ASA enforces the LDAP attributes based on attribute name, not numeric ID. RADIUS attributes, on
the other hand, are enforced by numeric ID, not by name.
Authorization refers to the process of enforcing permissions or attributes. An LDAP server defined as
an authentication or authorization server enforces permissions or attributes if they are configured.
For software Version 7.0, LDAP attributes include the cVPN3000 prefix. For software Versions 7.1 and
later, this prefix was removed.
Supported Cisco Attributes for LDAP Authorization
This section provides a complete list of attributes (see
concentrator, and PIX 500 series ASAs. The table includes attribute support information for the VPN
3000 concentrator and PIX 500 series ASAs to assist you in configuring networks with a combination
of these devices.
Table 1-2 ASA Supported Cisco Attributes for LDAP Authorization
Attribute Name
Access-Hours
Allow-Network-Extension- Mode
Authenticated-User-Idle- Timeout
Authorization-Required
Authorization-Type
Banner1
Supported Cisco Attributes for LDAP Authorization, page 1-5
Cisco AV Pair Attribute Syntax, page 1-13
Cisco AV Pairs ACL Examples, page 1-13
VPN
3000 ASA PIX
Y Y
Y Y
Y Y
Y
Y
Y Y
Table
Single or
Syntax/ Multi-Value
Type d
Y String Single
Y Boolean Single
Y Integer Single
Integer Single
Integer Single
Y String Single
Cisco ASA Series CLI Configuration Guide
Configuring an External LDAP Server
1-2) for the ASA 5500, VPN 3000
Possible Values
Name of the time-range
(for example, Business-Hours)
0 = Disabled
1 = Enabled
1 - 35791394 minutes
0 = No
1 = Yes
0 = None
1 = RADIUS
2 = LDAP
Banner string for clientless and
client SSL VPN, and IPsec clients.
1-5