Set "IETF-Radius-Idle-Timeout" to override Group-Policy's "vpn-session-timeout"?

[Alex Ferenstein]

Hi Community,

I wish to have dynamic override of Group-Policy's "vpn-session-timeout" (using "ldap attribute-map").

From reading ASA's "Supported RADIUS Authorization Attributes" section, it isn't clear but it would seem attribute "IETF-Radius-Session-Timeout" to be the corresponding ASA's Cisco attribute name for "vpn-session-timeout".

Anyone can confirm?

R's, Alex

[Michael Muenz · Accepted solution]

Yes!

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/A_RADAtr.html

[Alex Ferenstein]

Thank you.