Cisco ASA 5505 Configuration Manual page 658

Configuring AAA Server Groups
Field
ACL Netmask Convert
Microsoft CHAPv2 Capable If you use double authentication and enable password management in
TACACS+ Server Fields
The following table describes the unique fields for configuring TACACS+ servers, for use with the
"Adding a Server to a Group" section on page
Field
Server Port
Server Secret Key
Cisco ASA 5500 Series Configuration Guide using ASDM
31-12
Chapter 31
Description
How you want the adaptive security appliance to handle netmasks
received in downloadable access lists.
• Detect automatically: The adaptive security appliance attempts to
determine the type of netmask expression used. If the adaptive
security appliance detects a wildcard netmask expression, the
adaptive security appliance converts it to a standard netmask
expression.
Because some wildcard expressions are difficult to detect
Note
clearly, this setting may misinterpret a wildcard netmask
expression as a standard netmask expression.
• Standard: The adaptive security appliance assumes downloadable
access lists received from the RADIUS server contain only standard
netmask expressions. No translation from wildcard netmask
expressions is performed.
Wildcard: The adaptive security appliance assumes downloadable
•
access lists received from the RADIUS server contain only wildcard
netmask expressions, and it converts them all to standard netmask
expressions when the access lists are downloaded.
the tunnel group, then the primary and secondary authentication
requests include MS-CHAPv2 request attributes. If a RADIUS server
does not support MS-CHAPv2, then you can configure that server to
send a non-MS-CHAPv2 authentication request by unchecking this
check box.
31-10.
Description
The port to be used for this server.
The shared secret key used to authenticate the TACACS+ server to the
adaptive security appliance. The server secret that you configure here
should match the one that is configured on the TACACS+ server. If you
do not know the server secret, ask the RADIUS server administrator.
The maximum field length is 64 characters.
Configuring AAA Servers and the Local Database
OL-20339-01