3 # Cisco VPN 3000 Concentrator Dictionary
5 # http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/ad.htm
6 # http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/acsuser/ad.htm
7 # http://www.cisco.com/en/US/docs/security/vpn3000/vpn3000_47/configuration/guide/ldapapp.html#wp1564468 ## [wireshark]
11 VENDOR Cisco-VPN3000 3076
13 BEGIN-VENDOR Cisco-VPN3000
14 ATTRIBUTE CVPN3000-Access-Hours 1 string
15 ATTRIBUTE CVPN3000-Simultaneous-Logins 2 integer
16 ATTRIBUTE CVPN3000-Min-Password-Length 3 integer
17 ATTRIBUTE CVPN3000-Allow-Alpha-Only-Passwords 4 integer
18 ATTRIBUTE CVPN3000-Primary-DNS 5 ipaddr
19 ATTRIBUTE CVPN3000-Secondary-DNS 6 ipaddr
20 ATTRIBUTE CVPN3000-Primary-WINS 7 ipaddr
21 ATTRIBUTE CVPN3000-Secondary-WINS 8 ipaddr
22 ATTRIBUTE CVPN3000-SEP-Card-Assignment 9 integer
23 ATTRIBUTE CVPN3000-Priority-On-SEP 10 integer
24 ATTRIBUTE CVPN3000-Tunneling-Protocols 11 integer ## [wireshark] Bitmap
25 ATTRIBUTE CVPN3000-IPSec-Sec-Association 12 string
26 ATTRIBUTE CVPN3000-IPSec-Authentication 13 integer
27 ATTRIBUTE CVPN3000-IPSec-Banner1 15 string
28 ATTRIBUTE CVPN3000-IPSec-Allow-Passwd-Store 16 integer
29 ATTRIBUTE CVPN3000-Use-Client-Address 17 integer
30 ATTRIBUTE CVPN3000-PPTP-Min-Auth-Protocol 18 integer
31 ATTRIBUTE CVPN3000-L2TP-Min-Auth-Protocol 19 integer
32 ATTRIBUTE CVPN3000-PPTP-Encryption 20 integer ## [wireshark] bitmap
33 ATTRIBUTE CVPN3000-L2TP-Encryption 21 integer ## [wireshark] bitmap
34 ATTRIBUTE CVPN3000-Auth-Server-Type 22 integer
35 ATTRIBUTE CVPN3000-Auth-Server-Password 23 string
36 ATTRIBUTE CVPN3000-Request-Auth-Vector 24 string
37 ATTRIBUTE CVPN3000-IPSec-LTL-Keepalives 25 integer
38 ATTRIBUTE CVPN3000-IPSec-Group-Name 26 string
39 ATTRIBUTE CVPN3000-IPSec-Split-Tunnel-List 27 string
40 ATTRIBUTE CVPN3000-IPSec-Default-Domain 28 string
41 ATTRIBUTE CVPN3000-IPSec-Split-DNS-Names 29 string
42 ATTRIBUTE CVPN3000-IPSec-Tunnel-Type 30 integer
43 ATTRIBUTE CVPN3000-IPSec-Mode-Config 31 integer
44 ATTRIBUTE CVPN3000-Auth-Server-Priority 32 integer
45 ATTRIBUTE CVPN3000-IPSec-User-Group-Lock 33 integer
46 ATTRIBUTE CVPN3000-IPSec-Over-UDP 34 integer
47 ATTRIBUTE CVPN3000-IPSec-Over-UDP-Port 35 integer
48 ATTRIBUTE CVPN3000-IPSec-Banner2 36 string
49 ATTRIBUTE CVPN3000-PPTP-MPPC-Compression 37 integer
50 ATTRIBUTE CVPN3000-L2TP-MPPC-Compression 38 integer
51 ATTRIBUTE CVPN3000-IPSec-IP-Compression 39 integer
52 ATTRIBUTE CVPN3000-IPSec-IKE-Peer-ID-Check 40 integer
53 ATTRIBUTE CVPN3000-IKE-Keep-Alives 41 integer
54 ATTRIBUTE CVPN3000-IPSec-Auth-On-Rekey 42 integer
55 ATTRIBUTE CVPN3000-Reqrd-Client-Fw-Vendor-Code 45 integer
56 ATTRIBUTE CVPN3000-Reqrd-Client-Fw-Product-Code 46 integer
57 ATTRIBUTE CVPN3000-Reqrd-Client-Fw-Description 47 string
58 ATTRIBUTE CVPN3000-Require-HW-Client-Auth 48 integer
59 ATTRIBUTE CVPN3000-Require-Individual-User-Auth 49 integer
60 ATTRIBUTE CVPN3000-Authd-User-Idle-Timeout 50 integer
61 ATTRIBUTE CVPN3000-Cisco-IP-Phone-Bypass 51 integer
62 ATTRIBUTE CVPN3000-User-Auth-Server-Name 52 string
63 ATTRIBUTE CVPN3000-User-Auth-Server-Port 53 integer
64 ATTRIBUTE CVPN3000-User-Auth-Server-Secret 54 string
65 ATTRIBUTE CVPN3000-IPSec-Split-Tunneling-Policy 55 integer
66 ATTRIBUTE CVPN3000-IPSec-Reqrd-Client-Fw-Cap 56 integer
67 ATTRIBUTE CVPN3000-IPSec-Client-Fw-Filter-Name 57 string
68 ATTRIBUTE CVPN3000-IPSec-Client-Fw-Filter-Opt 58 integer
69 ATTRIBUTE CVPN3000-IPSec-Backup-Servers 59 integer
70 ATTRIBUTE CVPN3000-IPSec-Backup-Server-List 60 string
71 ATTRIBUTE CVPN3000-DHCP-Network-Scope 61 ipaddr
72 ATTRIBUTE CVPN3000-MS-Client-Icpt-DHCP-Conf-Msg 62 integer
73 ATTRIBUTE CVPN3000-MS-Client-Subnet-Mask 63 ipaddr
74 ATTRIBUTE CVPN3000-Allow-Network-Extension-Mode 64 integer
75 ATTRIBUTE CVPN3000-IPSec-Authorization-Type 65 integer
76 ATTRIBUTE CVPN3000-IPSec-Authorization-Required 66 integer
77 ATTRIBUTE CVPN3000-IPSec-DN-Field 67 string
78 ATTRIBUTE CVPN3000-IPSec-Confidence-Level 68 integer
79 ATTRIBUTE CVPN3000-WebVPN-Content-Filter 69 integer
80 ATTRIBUTE CVPN3000-WebVPN-Enable-functions 70 integer
81 ATTRIBUTE CVPN3000-WebVPN-Exchange-Addr 74 string
82 ATTRIBUTE CVPN3000-LEAP-Bypass 75 integer
83 ATTRIBUTE CVPN3000-WebVPN-Exchange-NETBIOS-name 78 string
84 ATTRIBUTE CVPN3000-Port-Forwarding-Name 79 string
85 ATTRIBUTE CVPN3000-IE-Proxy-Server 80 ipaddr ## [wireshark]
86 ATTRIBUTE CVPN3000-IE-Proxy-Server-Policy 81 integer ## [wireshark]
87 ATTRIBUTE CVPN3000-IE-Proxy-Exception-List 82 string ## [wireshark]
88 ATTRIBUTE CVPN3000-IE-Proxy-Bypass-Local 83 integer ## [wireshark]
89 ATTRIBUTE CVPN3000-IKE-Keepalive-Retry-Interval 84 integer ## [wireshark]
90 ATTRIBUTE CVPN3000-Perfect-Forward-Secrecy-Enable 88 integer ## [wireshark]
91 ATTRIBUTE CVPN3000-NAC-Enable 89 integer ## [wireshark]
92 ATTRIBUTE CVPN3000-NAC-Status-Query-Timer 90 integer ## [wireshark]
93 ATTRIBUTE CVPN3000-NAC-Revalidation-Timer 91 integer ## [wireshark]
94 ATTRIBUTE CVPN3000-NAC-Default-ACL 92 string ## [wireshark]
95 ATTRIBUTE CVPN3000-WebVPN-URL-Entry-Enable 93 integer ## [wireshark]
96 ATTRIBUTE CVPN3000-WebVPN-File-Access-Enable 94 integer ## [wireshark]
97 ATTRIBUTE CVPN3000-WebVPN-File-Svr-Entry-Enable 95 integer ## [wireshark]
98 ATTRIBUTE CVPN3000-WebVPN-File-Svr-Brwsing-Enable 96 integer ## [wireshark]
99 ATTRIBUTE CVPN3000-WebVPN-Port-Forwarding-Enable 97 integer ## [wireshark]
100 ATTRIBUTE CVPN3000-WebVPN-Outlook-Exch-Proxy-Enb 98 integer ## [wireshark]
101 ATTRIBUTE CVPN3000-WebVPN-Port-Fwding-HTTP-Proxy 99 integer ## [wireshark]
102 ATTRIBUTE CVPN3000-WebVPN-Auto-Applet-Downld-Enb 100 integer ## [wireshark]
103 ATTRIBUTE CVPN3000-WebVPN-Citrix-Metaframe-Enable 101 integer ## [wireshark]
104 ATTRIBUTE CVPN3000-WebVPN-Apply-ACL 102 integer ## [wireshark]
105 ATTRIBUTE CVPN3000-WebVPN-SSL-VPN-Client-Enable 103 integer ## [wireshark]
106 ATTRIBUTE CVPN3000-WebVPN-SSL-VPN-Client-Required 104 integer ## [wireshark]
107 ATTRIBUTE CVPN3000-WebVPN-SSL-VPN-Client-Keep-Ins 105 integer ## [wireshark]
108 ATTRIBUTE CVPN3000-Partition-Primary-DHCP 128 ipaddr
109 ATTRIBUTE CVPN3000-Partition-Secondary-DHCP 129 ipaddr
110 ATTRIBUTE CVPN3000-Partition-Premise-Router 131 ipaddr
111 ATTRIBUTE CVPN3000-Partition-Max-Sessions 132 integer
112 ATTRIBUTE CVPN3000-Partition-Mobile-IP-Key 133 string
113 ATTRIBUTE CVPN3000-Partition-Mobile-IP-Address 134 ipaddr
114 ATTRIBUTE CVPN3000-Partition-Mobile-IP-SPI 135 integer
115 ATTRIBUTE CVPN3000-Strip-Realm 136 integer
116 ATTRIBUTE CVPN3000-Group-Name 137 integer
118 VALUE CVPN3000-Allow-Alpha-Only-Passwords Disallow 0
119 VALUE CVPN3000-Allow-Alpha-Only-Passwords Allow 1
121 VALUE CVPN3000-SEP-Card-Assignment SEP1 1
122 VALUE CVPN3000-SEP-Card-Assignment SEP2 2
123 VALUE CVPN3000-SEP-Card-Assignment SEP3 4
124 VALUE CVPN3000-SEP-Card-Assignment SEP4 8
125 VALUE CVPN3000-SEP-Card-Assignment Any-SEP 15
127 VALUE CVPN3000-Priority-On-SEP High 1
128 VALUE CVPN3000-Priority-On-SEP Med-High 2
129 VALUE CVPN3000-Priority-On-SEP Medium 3
130 VALUE CVPN3000-Priority-On-SEP Med-Low 4
131 VALUE CVPN3000-Priority-On-SEP Low 5
133 ## [wireshark] This field is actually a bitmap: "legal values 0-11, 16-27"
134 VALUE CVPN3000-Tunneling-Protocols PPTP 1
135 VALUE CVPN3000-Tunneling-Protocols L2TP 2
136 VALUE CVPN3000-Tunneling-Protocols IPSec 4 ## [wireshark] exclusive of L2TP/IPSec
137 VALUE CVPN3000-Tunneling-Protocols L2TP/IPSec 8 ## [wireshark] exclusive of IPSec
138 VALUE CVPN3000-Tunneling-Protocols WebVPN 16 ## [wireshark]
140 VALUE CVPN3000-Tunneling-Protocols PPTP-And-L2TP 3 ## [wireshark]
141 VALUE CVPN3000-Tunneling-Protocols PPTP-and-IPSec 5
142 VALUE CVPN3000-Tunneling-Protocols L2TP-And-IPSec 6 ## [wireshark]
143 VALUE CVPN3000-Tunneling-Protocols PPTP-L2TP-IPSec 7 ## [wireshark]
144 VALUE CVPN3000-Tunneling-Protocols PPTP-And-L2TP-over-IPSec 9 ## [wireshark]
145 VALUE CVPN3000-Tunneling-Protocols L2TP-And-L2TP-over-IPSec 10 ## [wireshark]
146 VALUE CVPN3000-Tunneling-Protocols PPTP-L2TP-L2TP-OVER-IPSec 11 ## [wireshark]
148 VALUE CVPN3000-IPSec-Authentication None 0
149 VALUE CVPN3000-IPSec-Authentication RADIUS 1
150 VALUE CVPN3000-IPSec-Authentication LDAP 2
151 VALUE CVPN3000-IPSec-Authentication NTDomain 3
152 VALUE CVPN3000-IPSec-Authentication SDI 4
153 VALUE CVPN3000-IPSec-Authentication Internal 5
155 VALUE CVPN3000-IPSec-Allow-Passwd-Store Disallow 0
156 VALUE CVPN3000-IPSec-Allow-Passwd-Store Allow 1
158 VALUE CVPN3000-Use-Client-Address Disallow 0
159 VALUE CVPN3000-Use-Client-Address Allow 1
161 VALUE CVPN3000-PPTP-Min-Auth-Protocol PAP 1
162 VALUE CVPN3000-PPTP-Min-Auth-Protocol CHAP 2
163 VALUE CVPN3000-PPTP-Min-Auth-Protocol EAP-MD5 4
164 VALUE CVPN3000-PPTP-Min-Auth-Protocol EAP-GTC 8
165 VALUE CVPN3000-PPTP-Min-Auth-Protocol EAP-TLS 16
166 VALUE CVPN3000-PPTP-Min-Auth-Protocol MSCHAPv1 32
167 VALUE CVPN3000-PPTP-Min-Auth-Protocol MSCHAPv2 64
168 VALUE CVPN3000-PPTP-Min-Auth-Protocol Default 102
170 VALUE CVPN3000-L2TP-Min-Auth-Protocol PAP 1
171 VALUE CVPN3000-L2TP-Min-Auth-Protocol CHAP 2
172 VALUE CVPN3000-L2TP-Min-Auth-Protocol EAP-MD5 4
173 VALUE CVPN3000-L2TP-Min-Auth-Protocol EAP-GTC 8
174 VALUE CVPN3000-L2TP-Min-Auth-Protocol EAP-TLS 16
175 VALUE CVPN3000-L2TP-Min-Auth-Protocol MSCHAPv1 32
176 VALUE CVPN3000-L2TP-Min-Auth-Protocol MSCHAPv2 64
177 VALUE CVPN3000-L2TP-Min-Auth-Protocol Default 102
179 ## [wireshark] This field is a bitmap
180 VALUE CVPN3000-PPTP-Encryption PPTP-Required 1 ## [wireshark]
181 VALUE CVPN3000-PPTP-Encryption PPTP-40bit 2
182 VALUE CVPN3000-PPTP-Encryption PPTP-128 4
183 VALUE CVPN3000-PPTP-Encryption PPTP-Stateless-Required 8 ## [wireshark]
185 VALUE CVPN3000-PPTP-Encryption PPTP-40-Encryption-Req 3
186 VALUE CVPN3000-PPTP-Encryption PPTP-128-Encryption-Req 5
187 VALUE CVPN3000-PPTP-Encryption PPTP-40-or-128 6
188 VALUE CVPN3000-PPTP-Encryption PPTP-40-or-128-Encry-Req 7
189 VALUE CVPN3000-PPTP-Encryption PPTP-Enc-Stateless-Req 9 ## [wireshark]
190 VALUE CVPN3000-PPTP-Encryption PPTP-40-Stateless-Req 10
191 VALUE CVPN3000-PPTP-Encryption PPTP-40-Enc/Stateless-Req 11
192 VALUE CVPN3000-PPTP-Encryption PPTP-128-Stateless-Req 12
193 VALUE CVPN3000-PPTP-Encryption PPTP-128-Enc/Stateless-Req 13
194 VALUE CVPN3000-PPTP-Encryption PPTP-40/128-Stateless-Req 14
195 VALUE CVPN3000-PPTP-Encryption PPTP-40/128-Enc/Statls-Req 15
197 ## [wireshark] This field is a bitmap
198 VALUE CVPN3000-L2TP-Encryption L2TP-Required 1 ## [wireshark]
199 VALUE CVPN3000-L2TP-Encryption L2TP-40bit 2
200 VALUE CVPN3000-L2TP-Encryption L2TP-128 4
201 VALUE CVPN3000-L2TP-Encryption L2TP-Stateless-Req 8 ## [wireshark]
203 VALUE CVPN3000-L2TP-Encryption L2TP-40-Encryption-Req 3
204 VALUE CVPN3000-L2TP-Encryption L2TP-128-Encryption-Req 5
205 VALUE CVPN3000-L2TP-Encryption L2TP-40-or-128 6
206 VALUE CVPN3000-L2TP-Encryption L2TP-40-or-128-Encry-Req 7
207 VALUE CVPN3000-L2TP-Encryption L2TP-Enc-Stateless-Req 9 ## [wireshark]
208 VALUE CVPN3000-L2TP-Encryption L2TP-40-Stateless-Req 10
209 VALUE CVPN3000-L2TP-Encryption L2TP-40-Enc/Stateless-Req 11
210 VALUE CVPN3000-L2TP-Encryption L2TP-128-Stateless-Req 12
211 VALUE CVPN3000-L2TP-Encryption L2TP-128-Enc/Stateless-Req 13
212 VALUE CVPN3000-L2TP-Encryption L2TP-40/128-Stateless-Req 14
213 VALUE CVPN3000-L2TP-Encryption L2TP-40/128-Enc/Statls-Req 15
215 VALUE CVPN3000-Auth-Server-Type First-Active-Server 0
216 VALUE CVPN3000-Auth-Server-Type RADIUS 1
217 VALUE CVPN3000-Auth-Server-Type LDAP 2
218 VALUE CVPN3000-Auth-Server-Type NT 3
219 VALUE CVPN3000-Auth-Server-Type SDI 4
220 VALUE CVPN3000-Auth-Server-Type Internal 5
222 VALUE CVPN3000-IPSec-LTL-Keepalives OFF 0
223 VALUE CVPN3000-IPSec-LTL-Keepalives ON 1
225 VALUE CVPN3000-IPSec-Tunnel-Type LAN-to-LAN 1
226 VALUE CVPN3000-IPSec-Tunnel-Type Remote-Access 2
228 VALUE CVPN3000-IPSec-Mode-Config ON 1
229 VALUE CVPN3000-IPSec-Mode-Config OFF 0
231 VALUE CVPN3000-IPSec-User-Group-Lock OFF 0
232 VALUE CVPN3000-IPSec-User-Group-Lock ON 1
234 VALUE CVPN3000-IPSec-Over-UDP OFF 0
235 VALUE CVPN3000-IPSec-Over-UDP ON 1
237 ## [wireshark] all below until [\wireshark]
238 VALUE CVPN3000-PPTP-MPPC-Compression Off 0
239 VALUE CVPN3000-PPTP-MPPC-Compression On 1
241 VALUE CVPN3000-L2TP-MPPC-Compression Off 0
242 VALUE CVPN3000-L2TP-MPPC-Compression On 1
244 VALUE CVPN3000-IPSec-IP-Compression Off 0
245 VALUE CVPN3000-IPSec-IP-Compression On 1
247 VALUE CVPN3000-IPSec-IP-Compression None 0
248 VALUE CVPN3000-IPSec-IP-Compression LZS 1
250 VALUE CVPN3000-IPSec-IKE-Peer-IDCheck Required 1
251 VALUE CVPN3000-IPSec-IKE-Peer-IDCheck If-Supported-By-Certifiate 2
252 VALUE CVPN3000-IPSec-IKE-Peer-IDCheck Do-Not-Check 3
254 VALUE CVPN3000-IKE-Keep-Alives Off 0
255 VALUE CVPN3000-IKE-Keep-Alives On 1
257 VALUE CVPN3000-IPSec-Auth-On-Rekey Off 0
258 VALUE CVPN3000-IPSec-Auth-On-Rekey On 1
260 VALUE CVPN3000-Reqrd-Client-Fw-Vendor-Code Cisco-With-CIC 1
261 VALUE CVPN3000-Reqrd-Client-Fw-Vendor-Code Zone-Labs 2
262 VALUE CVPN3000-Reqrd-Client-Fw-Vendor-Code Network-ICE 3
263 VALUE CVPN3000-Reqrd-Client-Fw-Vendor-Code Sygate 4
264 VALUE CVPN3000-Reqrd-Client-Fw-Vendor-Code Cisco-With-CSA 5
266 VALUE CVPN3000-Require-HW-Client-Auth No 0
267 VALUE CVPN3000-Require-HW-Client-Auth Yes 1
269 VALUE CVPN3000-Require-Individual-User-Auth No 0
270 VALUE CVPN3000-Require-Individual-User-Auth Yes 1
272 VALUE CVPN3000-Cisco-IP-Phone-Bypass No 0
273 VALUE CVPN3000-Cisco-IP-Phone-Bypass Yes 1
275 VALUE CVPN3000-IPSec-Split-Tunneling-Policy Tunnel-Everything 0
276 VALUE CVPN3000-IPSec-Split-Tunneling-Policy Only-Tunnel-Listed-Networks 1
278 VALUE CVPN3000-IPSec-Reqrd-Client-Fw-Cap None 0
279 VALUE CVPN3000-IPSec-Reqrd-Client-Fw-Cap Policy-Defined-By-Remote-FW-AYT 1
280 VALUE CVPN3000-IPSec-Reqrd-Client-Fw-Cap Policy-Pushed-CPP 2
281 VALUE CVPN3000-IPSec-Reqrd-Client-Fw-Cap Policy-From-Server 4
283 VALUE CVPN3000-IPSec-Client-Fw-Filter-Opt Required 0
284 VALUE CVPN3000-IPSec-Client-Fw-Filter-Opt Optional 1
286 VALUE CVPN3000-IPSec-Backup-Servers User-Client-Configured-List 1
287 VALUE CVPN3000-IPSec-Backup-Servers Disable-And-Clear-Client-List 2
288 VALUE CVPN3000-IPSec-Backup-Servers Use-Backup-Server-List 3
290 VALUE CVPN3000-MS-Client-Icpt-DHCP-Conf-Msg No 0
291 VALUE CVPN3000-MS-Client-Icpt-DHCP-Conf-Msg Yes 1
293 VALUE CVPN3000-Allow-Network-Extension-Mode No 0
294 VALUE CVPN3000-Allow-Network-Extension-Mode Yes 1
296 VALUE CVPN3000-WebVPN-Content-Filter-Parameters JavaAndActiveX 1
297 VALUE CVPN3000-WebVPN-Content-Filter-Parameters JavaScript 2
298 VALUE CVPN3000-WebVPN-Content-Filter-Parameters JavaAndActiveX-Javascript 3
299 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Images 4
300 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Images-JavaAndActiveX 5
301 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Images-Javascript 6
302 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Images-Javascript-JavaAndActiveX 7
303 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies 8
304 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-JavaAndActiveX 9
305 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Javascript 10
306 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Javascript-JavaAndActiveX 11
307 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Images 12
308 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Images-JavaAndActiveX 13
309 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Images-Javascript 14
310 VALUE CVPN3000-WebVPN-Content-Filter-Parameters Cookies-Images-Javascript-JavaAndActiveX 15
313 VALUE CVPN3000-Strip-Realm FALSE 0
314 VALUE CVPN3000-Strip-Realm TRUE 1
316 END-VENDOR Cisco-VPN3000