Cisco PIX 500 Series Configuration Manual page 1076

Configuring an External RADIUS Server
Table E-5 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
IPSec-Authentication
Banner1
IPSec-Allow-Passwd-Store
Use-Client-Address
PPTP-Encryption
L2TP-Encryption
IPSec-Split-Tunnel-List
IPSec-Default-Domain
Cisco Security Appliance Command Line Configuration Guide
E-26
Appendix E Configuring an External Server for Authorization and Authentication
VPN Attr.
3000 ASA PIX #
Y 13
Y Y Y
15
Y Y Y
16
Y 17
Y 20
Y 21
Y Y Y
27
Y Y Y
28
Single
or
Syntax/ Multi-
Type Valued Description or Value
Integer Single 0 = None
1 = RADIUS
2 = LDAP (authorization only)
3 = NT Domain
4 = SDI
5 = Internal
6 = RADIUS with Expiry
7 = Kerberos/Active Directory
Single
String Banner string
Single
Boolean 0 = Disabled
1 = Enabled
Single
Boolean 0 = Disabled
1 = Enabled
Single
Integer Bitmap:
1 = Encryption required
2 = 40 bits
4 = 128 bits
8 = Stateless-Required
15 =
40/128-Encr/Stateless-Req
Single
Integer Bitmap:
1 = Encryption required
2 = 40 bit
4 = 128 bits
8 = Stateless-Req
15 =
40/128-Encr/Stateless-Req
Single
String Specifies the name of the
network/access list that
describes the split tunnel
inclusion list
Single
String Specifies the single default
domain name to send to the
client (1-255 characters)
OL-12172-03