Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-10
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring AAA Servers and the Local Database
Licensing Requirements for AAA Servers
– Uses the username value of the certificate primary DN field as a credential
Note If the primary DN field is not present in the certificate, the ASA uses the secondary DN field value as
the username for the authorization request.
For example, consider a user certificate that includes the following Subject DN fields and values:
Cn=anyuser,OU=sales;O=XYZCorporation;L=boston;S=mass;C=us;ea=anyuser@example.com
If the Primary DN = EA (E-mail Address) and the Secondary DN = CN (Common Name), then the
username used in the authorization request would be anyuser@example.com.
Licensing Requirements for AAA Servers
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context mode.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
Supports IPv6.
Configuring AAA
This section includes the following topics:
• Configuring AAA Server Groups, page 1-11
• Configuring Authorization with LDAP for VPN, page 1-18
• Configuring LDAP Attribute Maps, page 1-20
• Adding a User Account to the Local Database, page 1-22
• Authenticating Users with a Public Key for SSH, page 1-29
• Differentiating User Roles Using AAA, page 1-29
Model License Requirement
All models Base License.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English