cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

291
Views
0
Helpful
0
Replies
Highlighted
Beginner

Cisco ASA DAP Username attribut CLI

Hey guys,

 

I have just started writing scripts in expect language on my ASA. I am able to create new local users (AAA) and I can remove them, but where I am struggling is creating Dynamic Access Policy and adding a username attribute to it. Here is a part of my script:

send "conf t\n"
expect "(config)#"
send "access-list [string toupper $username] extended permit ip any host $ip\n"
expect "(config)#"
send "dynamic-access-policy-record $username\n"
expect "(config-dynamic-access-policy-record)#"
send "network-acl [string toupper $username]\n"
expect "(config-dynamic-access-policy-record)#"

 

Basically what this does that it first creates an access list rule with desired IP address, then creates DAP record and assigns the previously created acl rule to it. Where I am struggling is how to add the aaa.cisco.username of my user, so that it will use this DAP.

 

I wasn't able to find any CLI command for it, but I can manually click it in GUI (ASDM). Is there some kind of command, that lets me add a username to DAP record? Thank you in advance :)

Everyone's tags (5)