1-50
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Group Policies
Specifying VPN Access Hours for a Group Policy
Prerequisites
Create a time range. See
“Configuring Time Ranges” section on page 17-18
.”
Detailed Steps
Specifying Simultaneous VPN Logins for a Group Policy
Specify the number of simultaneous logins allowed for any user, using the
vpn-simultaneous-logins
command in group-policy configuration mode.
hostname(config-group-policy)#
vpn-simultaneous-logins
integer
The default value is 3. The range is an integer in the range 0 through 2147483647. A group policy can
inherit this value from another group policy. Enter 0 to disable login and prevent user access. The
following example shows how to allow a maximum of 4 simultaneous logins for the group policy named
FirstGroup:
hostname(config)#
group-policy FirstGroup attributes
hostname(config-group-policy)#
vpn-simultaneous-logins 4
hostname(config-group-policy)#
Note
While the maximum limit for the number of simultaneous logins is very large, allowing several
simultaneous logins could compromise security and affect performance.
Command
Purpose
Step 1
group-policy
value
attributes
Example:
hostname
> en
hostname#
config t
hostname(config)#
group-policy FirstGroup attributes
hostname(config-group-policy)#
Enter group policy configuration mode.
Step 2
hostname(config-group-policy)#
vpn-access-hours value
{
time-range-name
| none
}
Example:
hostname(config-group-policy)#
vpn-access-hours value
business-hours
hostname(config-group-policy)#
You can set the VPN access hours by associating a
configured time-range policy with a group policy
using the
vpn-access-hours
command in
group-policy configuration mode.
This command assigns a VPN access time range
named business-hours to the group policy named
FirstGroup.
A group policy can inherit a time-range value from
a default or specified group policy. To prevent this
inheritance, enter the
none
keyword instead of the
name of a time-range in this command. This
keyword sets VPN access hours to a null value,
which allows no time-range policy.
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......