Cisco Systems Assign Authentication Server Group to Interface

69-70
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter69 General VPN Setup
Configuring Clientless SSL VPN Connections
Add or Edit Clientless or SSL VPN Client Connection Profile or IPsec Connection
Profiles> Advanced > Authentication
The Authentication dialog box lets you view, add, edit, or delete interface-specific authentication server
groups. Each row of the table on this dialog box shows the status of one interface-specific server group:
the interface name, its associated server group, and whether fallback to the local database is enabled if
the selected server group fails.
Fields
•Interface-specific Authorization Server Groups—Manages the assignment of authorization server
groups to specific interfaces.
– Add or Edit—Opens the Assign Authentication Server Group to Interface dialog box, in which
you can specify the interface and server group, and specify whether to allow fallback to the
LOCAL database if the selected server group fails. The Manage button on this dialog box opens
the Configure AAA Server Groups dialog box. Your selections appear in the Interface/Server
Group table.
– Delete—Removes the selected server group from the table. There is no confirmation or undo.
Modes
The following table shows the modes in which this feature is available:
Assign Authentication Server Group to Interface
This dialog box lets you associate an interface with a AAA server group. The results appear in the table
on the Authentication dialog box.
Fields
•Interface—Selects an interface, DMZ, Outside, or Inside. The default is DMZ.
•Server Group—Selects a server group to assign to the selected interface. The default is LOCAL.
•Manage—Opens the Configure AAA Server Groups dialog box.
•Fallback—Enables or disables fallback to LOCAL if the selected server group fails.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
•—•——
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
•—•——