Cisco Systems Client Access Rules

69-31
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter69 General VPN Setup
ACL Manager
•IPsec Backup Servers—Activates the Server Configuration and Server IP Addresses fields, so you
can specify the UDP backup servers to use if these values are not inherited.
– Server Configuration—Lists the server configuration options to use as an IPsec backup server.
The available options are: Keep Client Configuration (the default), Use the Backup Servers
Below, and Clear Client Configuration.
– Server Addresses (space delimited)—Specifies the IP addresses of the IPsec backup servers.
This field is available only when the value of the Server Configuration selection is Use the
Backup Servers Below.
Modes
The following table shows the modes in which this feature is available:
Client Access Rules
The Client Access Rules table on this dialog box lets you view up to 25 client access rules. If you
uncheck the Inherit check box, the Add, Edit, and Delete buttons become active and the following
column headings appear in the table:
– Priority—Shows the priority for this rule.
– Action—Specifies whether this rule permits or denies access.
– Client Type—Specifies the type of VPN client to which this rule applies, software or hardware,
and for software clients, all Windows clients or a subset.
– VPN Client Version—Specifies the version or versions of the VPN client to which this rule
applies. This column contains a comma-separated list of software or firmware images
appropriate for this client.
Modes
The following table shows the modes in which this feature is available:
Add/Edit Client Access Rule
The Add or Edit Client Access Rule dialog box adds a new client access rule for an IPsec group policy
or modifies an existing rule.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
•—•——
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
•—•——