Configuring SSL VPN Connections
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Setting Advanced Attributes for a Connection Profile
The Advanced menu items and their dialog boxes let you configure the following characteristics for this
connection:
•
•
•
•
•
•
•
SSL VPN and secondary authentication attributes apply only to SSL VPN connection profiles.
Note
Cisco ASA 5500 Series Configuration Guide using ASDM
64-50
Use LOCAL if Server Group fails—Check to enable the use of the LOCAL database if the group
–
specified by the Authentication Server Group attribute fails.
Client Address Assignment—Select the DHCP servers, client address pools, and client IPv6 address
pools to use.
–
DHCP Servers—Enter the name or IP address of a DHCP server to use.
–
Client Address Pools—Enter the pool name of an available, configured pool of IP addresses to
use for client address assignment. Before making a selection, you can click Select to open a
dialog box over this dialog box to view or make changes to the address pools.
Default Group Policy—Select the group policy to use.
Group Policy—Select the VPN group policy that you want to assign as the default group policy
–
for this connection. A VPN group policy is a collection of user-oriented attribute-value pairs
that can be stored internally on the device or externally on a RADIUS server. The default value
is DfltGrpPolicy. You can click Manage to open a dialog box over this one to make changes to
the group policy configuration.
–
Enable SSL VPN Client Protocol—Check the check box to enable SSL VPN for this
connection; uncheck to disable it.
Find—Enter a GUI label or a CLI command to use as a search string, then click Next or Previous to
begin the search.
Security Context
Transparent Single
—
•
General attributes.
Client Addressing attributes
Authentication attributes.
Authorization attributes.
Accounting attributes.
Name server attributes.
Clientless SSL VPN attributes.
Multiple
Context
System
—
—
Chapter 64
General VPN Setup
OL-20339-01