1、 防火墙 上开启 WEBVPN Webvpn Enable outside Svc image disk0:/sslclient* Svc enable 2、 创建本地地址池、创建 ACL Ip local pool vpn-pool 192.168.1.1-192.168.1.100 Access-li本文来源gaodaimacom搞#^代%!码&网(st 100 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.25
1、 防火墙上开启WEBVPN
Webvpn
Enable outside
Svc image disk0:/sslclient*
Svc enable
<?xml:namespace prefix = o ns = “urn:schemas-microsoft-com:office:office” />
2、 创建本地地址池、创建ACL
Ip local pool vpn-pool 192.168.1.1-192.168.1.100
Access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0
3、 创建组策略
Group-policy vpn-group-policy internal
Group-policy vpn-group-policy attributes
Vpn-tunnel-group webvpn svc
Split-tunnel-policy tunnelspecified
Tunnel-group-network-list value 100
Webvpn
Svc ask enable
4、 创建隧道组
Tunnel-group vpn-tunnel-group type webvpn
Tunnel-group vpn-tunnel-group general-attributes
Address-pool vpn-pool
Tunnel-group vpn-tunnel-group webvpn-attributes
Group-alias group enable
5、 应用隧道
Webvpn
Tunnel-group-list enable
转载请注明原文链接：SSL VPN 基本防火墙配置
