C-32
Cisco ASA 5500 Series Configuration Guide using the CLI
AppendixC Configuring an External Server for Authorization and Authentication
Configuring an External RADIUS Server
DHCP-Network-Scope YYY61StringSingleIP Address
Intercept-DHCP-Configure-Msg YYY62BooleanSingle0 = Disabled
1 = Enabled
MS-Client-Subnet-Mask YYY63BooleanSingleAn IP address
Allow-Network-Extension-Mode YYY64BooleanSingle0 = Disabled
1 = Enabled
Authorization-Type YYY65IntegerSingle0 = None
1 = RADIUS
2 = LDAP
Authorization-Required Y 66 Integer Single 0 = No
1 = Yes
Authorization-DN-Field YYY67StringSinglePossible values: UID, OU, O,
CN, L, SP, C, EA, T, N, GN, SN,
I, GENQ, DNQ, SER,
use-entire-name
IKE-KeepAlive-Confidence-Interval YYY68IntegerSingle10 - 300 seconds
WebVPN-Content-Filter-Parameters Y Y 69 Integer Single 1 = Java ActiveX
2 = Java Script
4 = Image
8 = Cookies in images
WebVPN-URL-List Y 71 String Single URL-List name
WebVPN-Port-Forward-List Y 72 String Single Port-Forward list name
WebVPN-Access-List Y 73 String Single Access-List name
Cisco-LEAP-Bypass YYY75IntegerSingle0 = Disabled
1 = Enabled
WebVPN-Homepage Y Y 76 String Single A URL such as
http://example-example.com
Client-Type-Version-Limiting YYY77StringSingleIPsec VPN version number
string
WebVPN-Port-Forwarding-Name Y Y 79 String Single String name (example,
“Corporate-Apps”).
This text replaces the default
string, “Application Access,” on
the clientless portal home page.
IE-Proxy-Server Y 80 String Single IP address
IE-Proxy-Server-Policy Y 81 Integer Single 1 = No Modify
2 = No Proxy
3 = Auto detect
4 = Use Concentrator Setting
TableC-7 ASA Supported RADIUS Attributes and Values (continued)
Attribute Name
VPN
3000 ASA PIX
Attr.
No.
Syntax/
Type
Single
or
Multi-
Valued Description or Value