Cisco PIX 500 Series Configuration Manual page 1059

Appendix E Configuring an External Server for Authorization and Authentication
Table E-2 Security Appliance Supported LDAP Cisco Schema Attributes (continued)
Attribute Name/
OID (Object Identifier)
L2TP-Encryption
L2TP-MPPC-Compression
LDAP-Base-DN
LDAP-CRL-Data
LDAP-Filter
LDAP-Host-Name
LDAP-Host-Port
LDAP-Login
LDAP-Password
LDAP-Request-Type
LDAP-Scope
LDAP-Version
MS-Client-Subnet-Mask
PFS-Required
Port-Forwarding-Name
PPTP-Encryption
PPTP-MPPC-Compression
OL-12172-03
VPN Attr.
1
3000 ASA PIX OID
Y 15
Y 26
Y Y Y 45
Y Y Y 95
Y Y 60
Y 14
Y 25
Cisco Security Appliance Command Line Configuration Guide
Configuring an External LDAP Server
Single
or
Syntax/ Multi-
Type Valued Possible Values
Integer Single Bitmap:
1 = Encryption required
2 = 40 bit
4 = 128 bits
8 = Stateless-Req
15 =
40/128-Encr/Stateless-Req
Integer Single 0 = Disabled
1 = Enabled
String Single An IP address
Boolean Single 0 = No
1 = Yes
String Single Name string (for example,
"Corporate-Apps")
Integer Single Bitmap:
1 = Encryption required
2 = 40 bits
4 = 128 bits
8 = Stateless-Required
Example: 15 =
40/128-Encr/Stateless-Req
Integer Single 0 = Disabled
1 = Enabled
E-9