secpath 5020防火墙配置ssl vpn

你好：

下载轻轻松松配安全   找到 常用配置--ssl vpn配置指导--V7防火墙sslvpn配置指导web界面

下载链接如下

https://zhiliao.h3c.com/topic/huati/1248

您好，请知：

以下是SSL VPN WEB接入的配置案例连接，请参考：

https://zhiliao.h3c.com/theme/details/101776

SSL VPN WEB接入配置关键点如下：

[H3C]acl advanced 3000

[H3C-acl-ipv4-adv-3000]rule 0 permit tcp source any destination any

[H3C-acl-ipv4-adv-3000]quit

[SSL_VPN-F1060]sslvpn gateway james  //创建SSL VPN网关，命名为james

[SSL_VPN-F1060-sslvpn-gateway-james] ip address 192.168.200.254  //配置网关地址

[SSL_VPN-F1060-sslvpn-gateway-james] service enable  //开启SSL VPN网关服务

[SSL_VPN-F1060-sslvpn-gateway-james]quit

[SSL_VPN-F1060]sslvpn context james  //创建SSL VPN实例，实例名为james

[SSL_VPN-F1060-sslvpn-context-james] gateway james domain james  //绑定SSL VPN网关

[SSL_VPN-F1060-sslvpn-context-james] url-list  S5820  //创建URL清单

[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820]  heading web  //书签标题为web

[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820]  url S5820-https url-value h

ttps://10.1.1.1  //添加资源

[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820]  url S5820-http url-value ht

tp://10.1.1.1

[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820]quit

[SSL_VPN-F1060-sslvpn-context-james] url-list F1060

[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060]  heading web

[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060]  url F1060-https url-value h

ttps://192.168.10.1

[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060]  url F1060-http url-value ht

tp://192.168.10.1

[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060]quit

[SSL_VPN-F1060-sslvpn-context-james] policy-group url  //创建策略组，命名为url

[SSL_VPN-F1060-sslvpn-context-james-policy-group-url]  resources url-list S5820  //调用URL列表

[SSL_VPN-F1060-sslvpn-context-james-policy-group-url]  resources url-list F1060

[SSL_VPN-F1060-sslvpn-context-james-policy-group-url]filter web-access acl 3000

[SSL_VPN-F1060-sslvpn-context-james]service enable

[SSL_VPN-F1060-sslvpn-context-james]quit

[SSL_VPN-F1060]

创建用户名、密码，赋予SSL VPN登陆权限，并绑定daoSSL VPN的策略

[SSL_VPN-F1060]local-user james class network

New local user added.

[SSL_VPN-F1060-luser-network-james]password simple james

[SSL_VPN-F1060-luser-network-james]service-type sslvpn

[SSL_VPN-F1060-luser-network-james]authorization-attribute user-role network-ope

rator

[SSL_VPN-F1060-luser-network-james]authorization-attribute sslvpn-policy-group u

rl

[SSL_VPN-F1060-luser-network-james]quit