Cisco ASA Series Cli Configuration Manual page 2154

Configuring an External RADIUS Server
Table 1-7 ASA Supported RADIUS Attributes and Values (continued)
Attribute Name
IPsec-Client-Firewall-Filter-Name
IPsec-Client-Firewall-Filter-Optional
IPsec-Default-Domain
IPsec-IKE-Peer-ID-Check
IPsec-IP-Compression
IPsec-Mode-Config
IPsec-Over-UDP
IPsec-Over-UDP-Port
IPsec-Required-Client-Firewall-Capability
IPsec-Sec-Association
IPsec-Split-DNS-Names
IPsec-Split-Tunneling-Policy
IPsec-Split-Tunnel-List
IPsec-Tunnel-Type
IPv6-Address-Pools
IPv6-VPN-Filter
L2TP-Encryption
Cisco ASA Series CLI Configuration Guide
1-30
Appendix 1 Configuring an External Server for Authorization and Authentication
Single
or
Attr. Syntax/ Multi-
ASA No. Type Valued Description or Value
57 String Single
Y 58 Integer Single
Y 28 String Single
Y 40 Integer Single
Y 39 Integer Single
Y 31 Boolean Single
Y 34 Boolean Single
Y 35 Integer Single
Y 56 Integer Single
12 String Single
Y 29 String Single
Y 55 Integer Single
Y 27 String Single
Y 30 Integer Single
Y 218 String Single
Y 219 String Single
21 Integer Single
Specifies the name of the filter to be pushed
to the client as firewall policy
0 = Required
1 = Optional
Specifies the single default domain name to
send to the client (1-255 characters).
1 = Required
2 = If supported by peer certificate
3 = Do not check
0 = Disabled
1 = Enabled
0 = Disabled
1 = Enabled
0 = Disabled
1 = Enabled
4001 - 49151. The default is10000.
0 = None
1 = Policy defined by remote FW
Are-You-There (AYT)
2 = Policy pushed CPP
4 = Policy from server
Name of the security association
Specifies the list of secondary domain names
to send to the client (1-255 characters).
0 = No split tunneling
1 = Split tunneling
2 = Local LAN permitted
Specifies the name of the network/ACL that
describes the split tunnel inclusion list.
1 = LAN-to-LAN
2 = Remote access
Name of IP local pool-IPv6
ACL value
Bitmap:
1 = Encryption required
2 = 40 bits
4 = 128 bits
8 = Stateless-Req
15= 40/128-Encr/Stateless-Req