Cisco PIX 500 Series Configuration Manual page 1088

Configuring an External RADIUS Server
Table E-6 Security Appliance Supported RADIUS Attributes and Values (continued)
Attribute Name
IPSec-Client-Firewall-Filter-Optional
IPSec-Backup-Servers
IPSec-Backup-Server-List
DHCP-Network-Scope
Intercept-DHCP-Configure-Msg
MS-Client-Subnet-Mask
Allow-Network-Extension-Mode
Authorization-Type
Authorization-Required
Authorization-DN-Field
IKE-KeepAlive-Confidence-Interval
WebVPN-Content-Filter-Parameters
WebVPN-URL-List
WebVPN-Port-Forward-List
WebVPN-Access-List
Cisco-LEAP-Bypass
WebVPN-Homepage
Cisco Security Appliance Command Line Configuration Guide
E-38
Appendix E Configuring an External Server for Authorization and Authentication
VPN Attr.
3000 ASA PIX #
Y Y Y 58
Y Y Y 59
Y Y Y 60
Y Y Y 61
Y Y Y 62
Y Y Y 63
Y Y Y 64
Y Y Y 65
Y 66
Y Y Y 67
Y Y Y 68
Y Y 69
Y 71
Y 72
Y 73
Y Y Y 75
Y Y 76
Single
or
Syntax/ Multi-
Type Valued Description or Value
Integer Single 0 = Required
1 = Optional
String Single 1 = Use Client-Configured list
2 = Disable and clear client list
3 = Use Backup Server list
String Single Server Addresses (space
delimited)
String Single IP Address
Boolean Single 0 = Disabled
1 = Enabled
Boolean Single An IP address
Boolean Single 0 = Disabled
1 = Enabled
Integer Single 0 = None
1 = RADIUS
2 = LDAP
Integer Single 0 = No
1 = Yes
String Single Possible values: UID, OU, O,
CN, L, SP, C, EA, T, N, GN,
SN, I, GENQ, DNQ, SER,
use-entire-name
Integer Single 10-300 seconds
Integer Single 1 = Java ActiveX
2 = Java Script
4 = Image
8 = Cookies in images
String Single URL-List name
String Single Port-Forward list name
String Single Access-List name
Integer Single 0 = Disabled
1 = Enabled
String Single A URL such as
http://example-portal.com
OL-12172-03