Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 443)

25-29

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 25 Configuring Tunnel Groups, Group Policies, and Users

Configuring Users

The following example shows how to associate the user named “anyuser” with a time-range policy called

824:

hostname(config)# username anyuser attributes

hostname(config-username)# vpn-access-hours 824

Step 4 Specify the maximum number of simultaneous logins allowed for this user. The range is 0 through

2147483647. The default is 3 simultaneous logins. To remove the attribute from the running

configuration, enter the no form of this command. Enter 0 to disable login and prevent user access.

hostname(config-username)# vpn-simultaneous-logins

integer

hostname(config-username)# no vpn-simultaneous-logins

The following example shows how to allow a maximum of 4 simultaneous logins for the user named

“anyuser”:

hostname(config)# username anyuser attributes

hostname(config-username)# vpn-simultaneous-logins 4

Step 5 Specify the idle timeout period in minutes, or enter none to disable the idle timeout. If there is no

communication activity on the connection in this period, the security appliance terminates the

connection.

The range is 1 through 35791394 minutes. The default is 30 minutes. To allow an unlimited timeout

period, and thus prevent inheriting a timeout value, enter the vpn-idle-timeout command with the none

keyword. To remove the attribute from the running configuration, enter the no form of this command.

hostname(config-username)# vpn-idle-timeout {minutes | none}

hostname(config-username)# no vpn-idle-timeout

The following example shows how to set a VPN idle timeout of 15 minutes for the user named “anyuser”:

hostname(config)# username anyuser attributes

hostname(config-username)# vpn-idle-timeout 30

Step 6 Specify the maximum user connection time in minutes, or enter none to allow unlimited connection time

and prevent inheriting a value for this attribute. At the end of this period of time, the security appliance

terminates the connection.

The range is 1 through 35791394 minutes. There is no default timeout. To allow an unlimited timeout

period, and thus prevent inheriting a timeout value, enter the vpn-session-timeout command with the

none keyword. To remove the attribute from the running configuration, enter the no form of this

command.

hostname(config-username)# vpn-session-timeout {minutes | none}

hostname(config-username)# no vpn-session-timeout

The following example shows how to set a VPN session timeout of 180 minutes for the user named

“anyuser”:

hostname(config)# username anyuser attributes

hostname(config-username)# vpn-session-timeout 180

Step 7 Specify the name of a previously-configured, user-specific ACL to use a s a filter for VPN connections.

To disallow an access list and prevent inheriting an access list from the group policy, enter the vpn-filter

command with the none keyword. To remove the ACL, including a null value created by issuing the

vpn-filter none command, enter the no form of this command. The no option allows inheritance of a

value from the group policy. There are no default behaviors or values for this command.

1 2 ... 438 439 440 441 442 443 444 445 446 447 448 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 443

Kommentare zu diesen Handbüchern