Cisco ASA Series Cli Configuration Manual page 2146

Configuring an External LDAP Server
Figure 1-8
Step 7
Use the show vpn-sessiondb svc command to view the session details and verify the address assigned:
hostname# show vpn-sessiondb svc
Session Type: SVC
Username
Assigned IP
Protocol
Encryption
Bytes Tx
Group Policy : VPN_User_Group
Login Time
Duration
NAC Result
VLAN Mapping : N/A
Enforcing Dial-in Allow or Deny Access
The following example creates an LDAP attribute map that specifies the tunneling protocols allowed by
the user. You map the allow access and deny access settings on the Dialin tab to the Cisco attribute
Tunneling-Protocol, which supports the bitmap values shown in
Table 1-6
Value
1
2
1
4
2
8
Cisco ASA Series CLI Configuration Guide
1-22
Appendix 1
AnyConnect Session Established
: web1
: 10.1.1.2
: Clientless SSL-Tunnel DTLS-Tunnel
: RC4 AES128
: 304140
: 11:13:05 UTC Tue Aug 28 2007
: 0h:01m:48s
: Unknown
Bitmap Values for Cisco Tunneling-Protocol Attribute
Tunneling Protocol
PPTP
L2TP
IPsec (IKEv1)
L2TP/IPsec
Configuring an External Server for Authorization and Authentication
Index : 31
Public IP : 10.86.181.70
Hashing : SHA1
Bytes Rx : 470506
Tunnel Group : Group1_TunnelGroup
VLAN : none
Table 1-6: