webvpn 配置.pdf

Cisco SSL VPN配置实例 来源：net130 注意：这里的配置是SSL VPN的隧道模式 一、网络拓扑图一、网络拓扑图 二、二、SSL VPN Server 配置配置 软件版本： Cisco IOS Software, 7200 Software (C7200-ADVSECURITYK9-M), Version 12.4(9)T1, RELEASE SOFTWARE (fc2) VPN 客户端软件：sslclient-win-69.pkg 1、格式化、格式化 disk0 R1#format disk0: Format operation may take a while. Continue? [confirm] Format operation will destroy all data in disk0:. Continue? [confirm] Format: Drive communication 1st Sector Write OK... Writing Monlib sectors. Monlib write complete Format: All system sectors written. OK... Format: Total sectors in formatted partition: 8009 Format: Total bytes in formatted partition: 4100608 Format: Operation completed successfully. Format of disk0 complete 2、上传软件、上传软件 R1#copy tftp disk0: Address or name of remote host []? 00 Source filename []? sslclient-win-69.pkg Destination filename [sslclient-win-69.pkg]? Accessing t00/sslclient-win-69.pkg... Loading sslclient-win-69.pkg from 00 (via FastEthernet0/0): !! [OK - 415090 bytes] 415090 bytes copied in 12.892 secs (32197 bytes/sec) 3、安装、安装 client 软件软件 R1(config)#webvpn install svc disk0:/sslclient-win-69.pkg SSLVPN Package SSL-VPN-Client : installed successfully 4、配置、配置 SSL VPN R1(config)# aaa new-model R1(config)# aaa authentication login default local //为防止控制台超时而造成无法进 Exec R1(config))# aaa authentication login webvpn local R1(config)# ip local pool ssl-add 0 0 R1(config)# username user1 password 123 //定义WebVPN本地认证用户名,密码 R1(config))# webvpn gateway vpngateway //定义WebVPN在哪个接口上进行监听，此时IOS会 自动产生自签名证书。 R1 (config-webvpn-gateway)# ip address 0 port 443 R1 (config-webvpn-gateway)# inservice //启用webvpn gateway配置 R1 (config)# webvpn context webcontext //定义webvpn的相关配置，相当于ASA的tunnel- group ，在这里可以定义 R1 (config-webvpn-context)# gateway vpng