Filter
Top Products
7-18
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 7 Managing FlexConfigs
Understanding FlexConfig Policies and Policy Objects
SYS_GM_GET_ENABLED_IN
TF_NAME
1 VPN-enabled outside interface to the provider edge
(PE). Traffic originating or terminating on this
interface is evaluated for encryption or decryption, as
appropriate.
Configure group members to generate values for this
variable (Manage > Site-to-Site VPNs > Group
Members).
SYS_IPSEC_PROFILE_NAME 1 Name of the profile that defines the parameters to be
used for IPsec encryption between two group
members.
Configure the Group Encryption policy to generate
values for this variable (Manage > Site-to-Site VPNs
> Group Encryption Policy > Security Associations).
SYS_KS_REG_INTERFACE 0 Interface on the key server assigned to handle group
domain of interpretation (GDOI) registrations. If no
registration interface is specified, GDOI registrations
can occur on any interface.
Configure key servers to generate values for this
variable (Manage > Site-to-Site VPNs > Key Servers).
Table 7-5 Remote Access System Variables
Name Dimension Description
SYS_ASA_RA_TUNNEL_GR
OUP_NAME
2 Tunnel group name for ASA devices.
SYS_ASA_RA_USER_GROUP
_NAME
2 Name of the ASA user group.
SYS_EZVPN_RA_DYNAMIC_
CRYPTO_ MAP_NAME
1 Dynamic Crypto map name for EZVPN.
SYS_EZVPN_RA_DYNAMIC_
CRYPTO_ MAP_SEQ_NUM
1 Dynamic Crypto map number for EZVPN.
SYS_EZVPN_RA_PUBLIC_IN
TERFACE_PIX
2 External interface names for EZVPN for PIX firewall
and ASA devices only.
SYS_EZVPN_RA_STATIC_CR
YPTO_ MAP_NAME
1 Static crypto map names for EZVPN.
SYS_EZVPN_RA_STATIC_CR
YPTO_ MAP_SEQ_NUM
1 Static crypto map numbers for EZVPN.
SYS_IOS_RA_CA_NAME 1 Certificate authority (CA) names for Cisco IOS
devices.
SYS_IOS_RA_PUBLIC_INTE
RFACE
1 External interface names for Cisco IOS devices.
SYS_IOS_RA_USER_GROUP 1 User group names for Cisco IOS devices.
Table 7-4 VPN System Variables (Continued)
Name Dimension Description