ASA SSL VPN成功配置

network

ASA SSL VPN成功配置


下面是ASA SSL VPN的配置案例!
interface Ethernet0/0
nameif outside
security-level 0
ip address 198.1.1.1 255.255.255.0
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 172.30.1.97 255.255.255.0
!
ip local pool ssl-user 192.168.12.1-192.168.12.254
!
access-list go-vpn extended permit ip 172.30.1.0 255.255.255.0 192.168.12.0 255.255.255.0
!
global (outside) 1 interface
nat (inside) 0 access-list go-vpn
nat (inside) 1 172.30.1.0 255.255.255.0
route outside 0.0.0.0 0.0.0.0 198.1.1.2 1
!
username wanglinlin password kc0imQBKBLfYhNFb encrypted
!
group-policy mysslvpn-group-policy internal
group-policy mysslvpn-group-policy attributes
vpn-tunnel-protocol webvpn
webvpn
  svc enable
!
tunnel-group mysslvpn-group type webvpn
tunnel-group mysslvpn-group general-attributes
address-pool ssl-user
default-group-policy mysslvpn-group-policy
tunnel-group mysslvpn-group webvpn-attributes
group-alias mysslvpn enable
!
webvpn
enable outside
svc image disk0:/sslclient-win-1.1.1.164.pkg 1
svc enable
tunnel-group-list enable