Cisco Systems ASA 5555-X Network Router User Manual


 
Contents
vii
Cisco ASA Series Firewall CLI Configuration Guide
Access Rules for Returning Traffic 6-5
Allowing Broadcast and Multicast Traffic through the Transparent Firewall Using Access
Rules
6-5
Management Access Rules 6-6
Information About EtherType Rules 6-6
Supported EtherTypes and Other Traffic 6-6
Access Rules for Returning Traffic 6-7
Allowing MPLS 6-7
Licensing Requirements for Access Rules 6-7
Prerequisites 6-7
Guidelines and Limitations 6-7
Default Settings 6-8
Configuring Access Rules 6-8
Monitoring Access Rules 6-10
Configuration Examples for Permitting or Denying Network Access 6-10
Feature History for Access Rules 6-11
CHAPTER
7 Configuring AAA Rules for Network Access 7-1
AAA Performance 7-1
Licensing Requirements for AAA Rules 7-1
Guidelines and Limitations 7-2
Configuring Authentication for Network Access 7-2
Information About Authentication 7-2
One-Time Authentication 7-3
Applications Required to Receive an Authentication Challenge 7-3
ASA Authentication Prompts 7-3
AAA Prompts and Identity Firewall 7-4
AAA Rules as a Backup Authentication Method 7-5
Static PAT and HTTP 7-5
Configuring Network Access Authentication 7-7
Enabling Secure Authentication of Web Clients 7-10
Authenticating Directly with the ASA 7-11
Authenticating HTTP(S) Connections with a Virtual Server 7-11
Authenticating Telnet Connections with a Virtual Server 7-12
Configuring Authorization for Network Access 7-14
Configuring TACACS+ Authorization 7-14
Configuring RADIUS Authorization 7-17
Configuring a RADIUS Server to Send Downloadable Access Control Lists 7-17