最佳答案
您好,请知:
以下是SSL VPN的关键配置点,请参考:
[H3C]acl advanced 3000
[H3C-acl-ipv4-adv-3000]rule 0 permit tcp source any destination any
[H3C-acl-ipv4-adv-3000]quit
[SSL_VPN-F1060]sslvpn gateway james //创建SSL VPN网关,命名为james
[SSL_VPN-F1060-sslvpn-gateway-james] ip address 192.168.200.254 //配置网关地址
[SSL_VPN-F1060-sslvpn-gateway-james] service enable //开启SSL VPN网关服务
[SSL_VPN-F1060-sslvpn-gateway-james]quit
[SSL_VPN-F1060]sslvpn context james //创建SSL VPN实例,实例名为james
[SSL_VPN-F1060-sslvpn-context-james] gateway james domain james //绑定SSL VPN网关
[SSL_VPN-F1060-sslvpn-context-james] url-list S5820 //创建URL清单
[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820] heading web //书签标题为web
[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820] url S5820-https url-value h
ttps://10.1.1.1 //添加资源
[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820] url S5820-http url-value ht
tp://10.1.1.1
[SSL_VPN-F1060-sslvpn-context-james-url-list-S5820]quit
[SSL_VPN-F1060-sslvpn-context-james] url-list F1060
[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060] heading web
[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060] url F1060-https url-value h
ttps://192.168.10.1
[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060] url F1060-http url-value ht
tp://192.168.10.1
[SSL_VPN-F1060-sslvpn-context-james-url-list-F1060]quit
[SSL_VPN-F1060-sslvpn-context-james] policy-group url //创建策略组,命名为url
[SSL_VPN-F1060-sslvpn-context-james-policy-group-url] resources url-list S5820 //调用URL列表
[SSL_VPN-F1060-sslvpn-context-james-policy-group-url] resources url-list F1060
[SSL_VPN-F1060-sslvpn-context-james-policy-group-url]filter web-access acl 3000
[SSL_VPN-F1060-sslvpn-context-james]service enable
[SSL_VPN-F1060-sslvpn-context-james]quit
[SSL_VPN-F1060]
创建用户名、密码,赋予SSL VPN登陆权限,并绑定daoSSL VPN的策略
[SSL_VPN-F1060]local-user james class network
New local user added.
[SSL_VPN-F1060-luser-network-james]password simple james
[SSL_VPN-F1060-luser-network-james]service-type sslvpn
[SSL_VPN-F1060-luser-network-james]authorization-attribute user-role network-ope
rator
[SSL_VPN-F1060-luser-network-james]authorization-attribute sslvpn-policy-group u
rl
[SSL_VPN-F1060-luser-network-james]quit
以下是参考链接,请参考:
https://www.h3c.com/cn/Service/Document_Software/Document_Center/Home/Security/00-Public/Configure/Web_Configure/H3C_WCG(V7)-6W401/
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论