38-32
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter38 Configuring AAA Servers and the Local Database
Feature History for AAA Servers
Key vendor-specific attributes (VSAs) sent in
RADIUS access request and accounting request
packets from the ASA
8.4(3) Four New VSAs—Tunnel Group Name (146) and Client
Type (150) are sent in RADIUS access request packets from
the ASA. Session Type (151) and Session Subtype (152) are
sent in RADIUS accounting request packets from the ASA.
All four attributes are sent for all accounting request packet
types: Start, Interim-Update, and Stop. The RADIUS server
(for example, ACS and ISE) can then enforce authorization
and policy attributes or use them for accounting and billing
purposes.
Common Criteria certification and FIPS support
for password policy, password change, and SSH
public key authentication
8.4(4.1) We introduced the following screens: Configuration >
Device Management > Users/AAA > Password Policy
Configuration > Device Management > Users/AAA >
Change Password
Configuration > Device Management > Users/AAA > User
Accounts > Edit User Account > Public Key
Authentication.
Table38-2 Feature History for AAA Servers
Feature Name
Platform
Releases Feature Information