Cisco ASA 5540 User Manual

1-31
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring Connection Profiles
Figure 1-3 Active Directory—Maximum Password Age
Note The radius-with-expiry command, formerly configured as part of tunnel-group remote-access
configuration to perform the password age function, is deprecated. The password-management
command, entered in tunnel-group general-attributes mode, replaces it.
Using Active Directory to Override an Account Disabled AAA Indicator
To override an account-disabled indication from a AAA server, use the override-account-disable
command in tunnel-group general-attributes configuration mode on the ASA and perform the following
steps under Active Directory.
Note Allowing override account-disabled is a potential security risk.
Step 1 Select Start > Programs > Administrative Tools > Active Directory Users and Computers.
Step 2 Right-click Username > Properties > Account and select Disable Account from the menu.

Cisco ASA 5540 Specifications

General

Firewall Throughput	650 Mbps
Maximum Firewall Connections	400, 000
VPN Throughput	225 Mbps
Maximum VPN Peers	5, 000
High Availability	Active/Active, Active/Standby
IPSec VPN Throughput	225 Mbps
Memory	1 GB
IPS Throughput	225 Mbps
Security Contexts	50
Flash Memory	64 MB
Form Factor	1U
Power Supply	Dual
Interfaces	4 x 10/100/1000 Ethernet