Cisco PIX 500 Series Configuration Manual page 37

Configuring an External Server for Authorization and Authentication
E
A P P E N D I X
G
L O S S A R Y
I
N D E X
OL-12172-03
IPv6 Address Prefixes
Protocols and Applications
TCP and UDP Ports
D-11
Local Ports and Protocols
ICMP Types
D-15
Selecting LDAP, RADIUS, or Local Authentication and Authorization
Understanding Policy Enforcement of Permissions and Attributes
Configuring an External LDAP Server
Reviewing the LDAP Directory Structure and Configuration Procedure
Organizing the Security Appliance LDAP Schema
Searching the Hierarchy
Binding the Security Appliance to the LDAP Server
Defining the Security Appliance LDAP Schema
Cisco-AV-Pair Attribute Syntax
Example Security Appliance Authorization Schema
Loading the Schema in the LDAP Server
Defining User Permissions
Example User File
Reviewing Examples of Active Directory Configurations
Example 1: Configuring LDAP Authorization with Microsoft Active Directory (ASA/PIX)
Example 2: Configuring LDAP Authentication with Microsoft Active Directory
Example 3: LDAP Authentication and LDAP Authorization with Microsoft Active Directory
Configuring an External RADIUS Server
Reviewing the RADIUS Configuration Procedure
Security Appliance RADIUS Authorization Attributes
Configuring an External RADIUS Server
Reviewing the RADIUS Configuration Procedure
Security Appliance RADIUS Authorization Attributes
Security Appliance TACACS+ Attributes
D-10
D-11
D-14
E-2
E-4
E-5
E-13
E-17
E-17
E-18
E-24
E-33
E-40
Cisco Security Appliance Command Line Configuration Guide
E-1
E-1
E-2
E-3
E-3
E-5
E-15
E-18
E-24
E-25
E-33
E-34
Contents
E-18
E-20
E-22
xxxvii