Cisco FirePOWER ASA 5500 series Configuration Manual page 916

Configuring an External LDAP Server
Table E-2 Security Appliance Supported LDAP Cisco Schema Attributes
Attribute Name/
OID (Object Identifier)
cVPN3000-Access-Hours
cVPN3000-Simultaneous-Logins
cVPN3000-Primary-DNS
cVPN3000-Secondary-DNS
cVPN3000-Primary-WINS
cVPN3000-Secondary-WINS
cVPN3000-SEP-Card-Assignment
cVPN3000-Tunneling-Protocols
cVPN3000-IPSec-Sec-Association
cVPN3000-IPSec-Authentication
cVPN3000-IPSec-Banner1
cVPN3000-IPSec-Allow-Passwd-Store
cVPN3000-Use-Client-Address
Cisco Security Appliance Command Line Configuration Guide
E-6
Appendix E Configuring an External Server for Authorization and Authentication
VPN Attr.
1
3000 ASA PIX OID
Y Y Y 1
Y Y Y 2
Y Y Y 3
Y Y Y 4
Y Y Y 5
Y Y Y 6
7
Y Y Y 8
Y 9
Y 10
Y Y Y 11
Y Y Y 12
Y 13
Single
or
Syntax/ Multi-
Type Valued Possible Values
String Single Name of the time-range (i.e.,
Business-Hours)
Integer Single 0-2147483647
String Single An IP address
String Single An IP address
String Single An IP address
String Single An IP address
Integer Single Not used
Integer Single 1 = PPTP
2 = L2TP
4 = IPSec
8 = L2TP/IPSec
16 = WebVPN.
8 and 4 are mutually exclusive
(0 - 11, 16 - 27 are legal
values)
String Single Name of the security
association
Integer Single 0 = None
1 = RADIUS
2 = LDAP (authorization only)
3 = NT Domain
4 = SDI
5 = Internal
6 = RADIUS with Expiry
7 = Kerberos/Active Directory
String Single Banner string
Boolean Single 0 = Disabled
1 = Enabled
Boolean Single 0 = Disabled
1 = Enabled
OL-10088-01