See the Configuring Smart CLI Objects section of the Advanced Configuration chapter of the Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager for the version your device is running.

If you do not have an extended ACL you must create the required extended ACL object from a Smart CLI template in the FDM console.

Redirect ACL - Select the extended Access Control List (ACL) to use for the RA VPN redirect ACL.If you have Cisco Identity Services Engine (ISE) already configured for your network and are using the server for remote access VPN Change of Authorization configuration, click the RA VPN Only link and configure the following:.If you do not configure a secret key, the connection is not encrypted. + The string must match the one configured on the RADIUS server. The key must start with an alphanumeric character or an underscore, and it can contain the special characters: $ & - _. The key is a case-sensitive, alphanumeric string of up to 64 characters, with no spaces. Enter the Server Secret Key(Optional) - The shared secret that is used to encrypt data between the Firepower Threat Defense device and the RADIUS server.Timeout - The length of time, 1-300 seconds, that the system waits for a response from the server before sending the request to the next server.Authentication Port (Optional) - The port on which RADIUS authentication and authorization are performed.Server Name or IP Address - The fully-qualified host name (FQDN) or IP address of the server.Edit the Identity Source configuration with the following properties:.Select RADIUS Server as the Identity Source Type.Click Create Object > RA VPN Objects (ASA & FTD) > Identity Source.

From the CDO navigation bar, click Objects.

Use the following procedure to create an object: RADIUS servers provide AAA (authentication, authorization, and accounting) services.

Cisco ftd 1120