SSL VPN 配置分享

李壑彝

配置证书
crypto key generate rsa label sslvpnkeypair
crypto ca trustpoint localtrust
enrollment self
fqdn sslvpn cisco.com
subject-name CN=sslvpn.cisco.com
keypair sslvpnkeypair
crypto ca enroll localtrust noconfirm
ssl trust-point localtrust ISP
将SSL VPN客户端映象上传到ASA
copy ftfp://
webvpn
svc image
启用ssl vpn 访问
enable ISP
svc enable
exit
建立 ssl vpn 拨号地址池
ip local pool SSLClientpool 10.13.1.1-10.13.1.100 mask 255.255.255.0
group-policy SSLCLientpolicy internal
group-policy SSLCLientpolicy attributes
dns-server value 8.8.8.8
vpn-tunnel-protocol svc
default-domain value tsweb.local
address-pools value SSLClientpool
exit
sysopt connection permit-vpn
tunnel-group SSLClientprofile type remote-access
tunnel-group SSLClientprofile general-attributes
default-group-policy SSLCLientpolicy
tunnel-group SSLClientprofile webvpn-attributes
group-alias SSLVPNClient enable
exit
webvpn
tunnel-group-list enable
exit
access-list inside_nat0_outbound extended permit ip 10.0.0.0 255.0.0.0 10.13.1.0 255.255.255.0
nat(inside) 0 access-list inside_nat0_outbound

username admin password cisco
username admin attributes
service-type remote-access
exit

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

李壑彝

破人

Rockyw

感谢楼主分享！

李壑彝

李壑彝