Dictionary attribute Cisco-VPN3000:CVPN3000/ASA/PIX7x-IPSec-Split-Tunneling-Policy

[scamarda]

Editing AuthZ profile.  Manually adding ASA VPN attributes.  Getting the following error.

Unable to edit Authorization Profile (VPNGroupPolicy) : Value for the dictionary attribute Cisco-VPN3000:CVPN3000/ASA/PIX7x-IPSec-Spli

t-Tunneling-Policy should be of Unsigned Int 32 type.

What values are appropriate for this attribute?

Thanks.

Sam

[howon · Accepted solution]

VALUE	ASA-IPsec-Split-Tunneling-Policy No-Split-Tunneling	0
VALUE	ASA-IPsec-Split-Tunneling-Policy Split-Tunneling	1
VALUE	ASA-IPsec-Split-Tunneling-Policy Local-LAN-Permitted	2

Cisco ASA 5500 Series Configuration Guide using the CLI, 8.2 - Configuring an External Server for Security Appliance Use…

Also, some reference on how to use the feature:

https://supportforums.cisco.com/discussion/10764256/dynamic-split-tunnel

[scamarda]

Thanks for the help.  This allowed me to move forward.