tunnel-group tun01 type remote-access
tunnel-group tun01 general-attributes
 dhcp-server 10.10.10.10
 dhcp-server link-selection 10.10.10.11
 dhcp-server subnet-selection 10.10.10.12
 authorization-required
 authorization-server-group (outside) aaa
 accounting-server-group aaa
 address-pool (vpn) vpn_pool
 authentication-server-group (outside) LOCAL
 authentication-attr-from-server secondary
 authenticated-session-username secondary
 default-group-policy default_gpol
 ipv6-address-pool (outside) v6pool
 nat-assigned-to-public-ip outside 
 scep-enrollment enable 
 secondary-authentication-server-group (outside) aaa LOCAL use-primary-username
 secondary-username-from-certificate C CN no-certificate-fallback cert
 username-from-certificate C CN
 strip-group
 strip-realm
tunnel-group tun01 webvpn-attributes
 authentication aaa certificate
 customization DfltCustomization
 dns-group dnsgrp
 group-alias grpalias enable
 group-alias aj disable
 group-url https://blah enable
 nbns-server 10.10.10.10 master timeout 20 retry 8
 nbns-server 10.1.1.1 timeout 2 retry 2
 override-svc-download
 pre-fill-username clientless
 pre-fill-username ssl-client hide
 proxy-auth sdi
 radius-reject-message
 saml identity-provider idp
 secondary pre-fill-username clientless hide
 secondary pre-fill-username ssl-client
 without-csd anyconnect 
tunnel-group tun01 ipsec-attributes
 ikev1 pre-shared-key *****
 chain
 ikev1 client-update type Win9X url https://blah rev-nums 1,3
 ikev1 client-update type WinNT url https://blah rev-nums 1,3
 ikev1 client-update type Windows url https://blah rev-nums 1,3
 ikev1 client-update type mac url https://blah rev-nums 5,9
 ikev1 client-update type linux url https://blah rev-nums 3,5
 ikev1 client-update type vpn3002 url tftp://blah rev-nums 13,15
 ikev1 trust-point trust_point
 ikev1 user-authentication (outside) hybrid
 ikev2 local-authentication certificate cert
 ikev2 local-authentication pre-shared-key
 ikev2 remote-authentication certificate
 ikev2 remote-authentication eap query-identity
 ikev2 remote-authentication pre-shared-key *****
 peer-id-validate nocheck
 radius-with-expiry
tunnel-group tun01 ppp-attributes
 authentication pap
 authentication ms-chap-v2
 authentication eap-proxy
tunnel-group 10.15.20.25 type ipsec-l2l
tunnel-group 10.15.20.25 ipsec-attributes
 ikev1 pre-shared-key *****
tunnel-group 10.20.30.40 type ipsec-l2l
tunnel-group 10.20.30.40 ipsec-attributes
 ikev1 pre-shared-key *****
