SSLVPN基本防火墙配置

1、 防火墙 上开启 WEBVPN Webvpn Enable outside Svc image disk0:/sslclient* Svc enable 2、 创建本地地址池、创建 ACL Ip local pool vpn-pool 192.168.1.1-192.168.1.100 Access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.25

1、 防火墙上开启WEBVPN

Webvpn

Enable outside

Svc image disk0:/sslclient*

Svc enable

2、 创建本地地址池、创建ACL

Ip local pool vpn-pool 192.168.1.1-192.168.1.100

Access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.10.0 255.255.255.0

3、 创建组策略

Group-policy vpn-group-policy internal

Group-policy vpn-group-policy attributes

Vpn-tunnel-group webvpn svc

Split-tunnel-policy tunnelspecified

Tunnel-group-network-list value 100

Webvpn

Svc ask enable

4、 创建隧道组

Tunnel-group vpn-tunnel-group type webvpn

Tunnel-group vpn-tunnel-group general-attributes

Address-pool vpn-pool

Tunnel-group vpn-tunnel-group webvpn-attributes

Group-alias group enable

5、 应用隧道

Webvpn

Tunnel-group-list enable