求一个靠谱的做ssl vpn实验的ios

百花开的 · 发表于 2017-2-26 13:36:18

c7200-adventerprisek9-mz.152-4.M.bin
c7200-adventerprisek9-mz.152-4.M2.bin
c7200-adventerprisek9-mz.152-4.M4.bin
c7200-adventerprisek9-mz.152-4.M7.bin
c7200-adventerprisek9-mz.152-4.M9.bin
今天做路由器做为服务器拨SLLVPN实验的过程中。我找到如上几个ios
在做到通过ssl client的三层模式也就是通过anyconnect3.0来用ssl远程拨号的实验的时候。能正常拨上去但是拨不通内部的服务器。
上面的所有的IOS我都试了。只有c7200-adventerprisek9-mz.152-4.M2.bin这个可以ping通内部服务器。别的都会提示如下消息。

*Feb 26 13:10:11.127: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:32.191: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:36.335: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:38.251: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:39.359: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:45.287: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z
R2#
*Feb 26 13:10:47.287: -Traceback= 64C8AEC0z 64C8CB58z 64D348B4z 64D34964z 64D34AE4z 64D39C58z 61FB4E18z 600103A4z 600DDE04z 600E2660z

ping 不通能不服务器。我在内部服务器上开debug是可以收到包的，但是回包回不去
我用c7200-adventerprisek9-mz.152-4.M2.bin也有点问题，就是拨上去访问内部服务器的数据量不能太大。太大的话就直接卡死了。
大家有没有可以完美做这个实验的ios??
R2-GW#copy ftp://cisco:cisco@10.1.1.88/anyconnect-win-3.0.0629-k9.pkg disk0
R2-GW#$/cisco:cisco@10.1.1.88/anyconnect-win-3.0.0629-k9.pkg disk0:/
Destination filename [anyconnect-win-3.0.0629-k9.pkg]?
Accessing ftp://*****:*****@10.1.1.88/anyconnect-win-3.0.0629-k9.pkg...
Loading anyconnect-win-3.0.0629-k9.pkg !!!
*Feb 26 13:26:33.799: %DOSFS-5-DIBERR: disk0 is formatted from a different router or PC. A format in this router is required before an image can be booted from this device!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 21800354/4096 bytes]

21800354 bytes copied in 45.508 secs (479044 bytes/sec)

crypto vpn anyconnect disk0:/anyconnect-win-3.0.0629-k9.pkg

QQ截图20170226133222.png

最后就是这个效果。数据量不能太大，太大就挂了。谁有比较完美的ssl vpn实验的ios?
Building configuration...

Current configuration : 4540 bytes
!
! Last configuration change at 13:30:51 UTC Sun Feb 26 2017
upgrade fpd auto
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2-GW
!
boot-start-marker
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authentication login sslvpn local
!
!
!
!
!
aaa session-id common
no ip icmp rate-limit unreachable
!
!
!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-4279256517
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4279256517
revocation-check none
rsakeypair TP-self-signed-4279256517
!
!
crypto pki certificate chain TP-self-signed-4279256517
certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 34323739 32353635 3137301E 170D3137 30323236 31333137
  31375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 32373932
  35363531 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100C828 24CA6C93 191CEBDA 7AF7BD35 D3EA15DC A183BFF6 4BB0E219 5A59793B
  E8C65FB4 3AFF1893 C23A38D6 D37E44B0 C6E4E749 641F4878 7E5A8B8C AEAC65FC
  F0F8C3D0 71804410 45D2E1E2 42C4BA68 1470C7A9 60D91814 ECB33961 210EC0A0
  DC9BBC49 BDD6666D F3B48EAA 3EA0DD9F C3C4F116 F194E629 472FF525 5F88E95A
  76AF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 141F08C4 C3C11AB8 2DCCE07E 2D126AF0 7E137C70 E1301D06
  03551D0E 04160414 1F08C4C3 C11AB82D CCE07E2D 126AF07E 137C70E1 300D0609
  2A864886 F70D0101 05050003 818100AC CCF1FC9D 9DBA658A 485ADCE1 49279A7C
  288FAC1F AEE760A2 B3261F42 59CE166B 27645862 0814B98C F56375B2 6372BAB1
  44DFCACA D6F67BDC 3A69112A 1C9216B7 FD86663C 0679B6FF 998C0E88 472EE140
  3911B8D0 5FD7A356 533A7542 7119059E 738BC624 525EE840 201E392C 651557D8
  330257EA 0E394DA5 C05B8B42 6C0882
      quit
username user1 privilege 15 password 0 cisco
!
redundancy
!
!
ip tcp synwait-time 5
csdb tcp synwait-time 30
csdb tcp idle-time 3600
csdb tcp finwait-time 5
csdb tcp reassembly max-memory 1024
csdb tcp reassembly max-queue-length 16
csdb udp idle-time 30
csdb icmp idle-time 10
csdb session max-session 65535
!
!
crypto vpn anyconnect disk0:/webvpn/anyconnect-win-3.0.0629-k9.pkg sequence 1
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface Ethernet1/0
ip address 201.100.1.254 255.255.255.0
duplex half
!
interface Ethernet1/1
ip address 10.1.1.254 255.255.255.0
duplex half
!
interface Ethernet1/2
no ip address
shutdown
duplex half
!
interface Ethernet1/3
no ip address
shutdown
duplex half
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Virtual-Template1
ip unnumbered Ethernet1/0
!
ip local pool sslpool 123.1.1.100 123.1.1.110
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 201.100.1.10
!
no cdp log mismatch duplex
!
!
!
!
!
control-plane
!
!
!
mgcp profile default
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
transport input all
!
!
!
webvpn gateway gw
ip address 201.100.1.254 port 443
ssl trustpoint TP-self-signed-4279256517
inservice
!
webvpn context c1
!
port-forward "telnet.port.forward"
local-port 5000 remote-server "10.1.1.1" remote-port 23 description "port-forwad-thinclient"
!
smart-tunnel list "smart-tunnel"
appl "remote.disktop" "mstsc.exe" windows
appl "ssh" "putty.exe" windows
appl "ie" "iexplore.exe" windows
gateway gw
logging enable
!
ssl authenticate verify all
!
url-list "inside.http.name"
heading "inside.http.heading"
url-text "inside.http.label" url-value "http://10.1.1.1"
inservice
!
policy group grouppolicy1
port-forward "telnet.port.forward"
smart-tunnel list "smart-tunnel"
functions svc-enabled
svc address-pool "sslpool" netmask 255.255.255.0
svc default-domain "cisco.com"
url-list "inside.http.name"
default-group-policy grouppolicy1
!
end

huyihao9090 · 发表于 2017-2-26 21:45:06

做ssl vpn为什么不用asa……

Rockyw · 发表于 2017-2-27 11:04:46

是呀用ASA做做看

百花开的 · 发表于 2017-2-27 11:21:12

我就是想测试下路由器做ssl vpn的实验。看下行不行。

一只猪林 · 发表于 2019-2-20 17:19:49

楼主可以把你的ios发给我下看看吗谢谢！

账号		自动登录	找回密码
密码			论坛注册

求一个靠谱的做ssl vpn实验的ios

客服中心

投诉建议