Group-Lock when there is no Group

Posted December 9th, 2008 by bcarroll and filed in CCIE Security
Tags:
Add a Comment

Examine the output below:

asa(config-username)# group-lock value WEBVPN
WARNING: tunnel-group  does not exist
asa(config-username)# sh run username
username CISCO password FFTdXxgak9zQNzNG encrypted
username CISCO attributes
 group-lock value WEBVPN

Notice that a warning is given when a user is locked into a group that doesn’t exist. Although you receive the warning the command is still applied.

Leave a Reply