SSL VPN不同用户不同权限的疑问

可以的。给不同用户分配不同的策略组权限，然后给这些策略组下发不同的路由表或者做acl过滤就可以了。我写一个下发不同的路由表的吧，配完之后放通安全策略应该就可以了。

例：

interface SSLVPN-AC0

 ip address 172.16.200.254 255.255.255.0

sslvpn ip address-pool test 172.16.200.1 172.16.200.15

sslvpn gateway test

 http-redirect

 ip address 222.222.222.222 port 60000

 service enable

local-user test1 class network

 password simple 12345ABCDE

 service-type sslvpn

 authorization-attribute sslvpn-policy-group test1

local-user test2 class network

 password simple 54321abcde

 service-type sslvpn

 authorization-attribute sslvpn-policy-group test2

acl advanced 3600

 rule 10000 permit ip

sslvpn context test

 gateway test domain test

 ip-tunnel interface SSLVPN-AC0

 ip-tunnel address-pool test mask 255.255.255.0

 ip-route-list test1

  include 192.168.10.0 255.255.255.0

 ip-route-list test2

  include 192.168.20.0 255.255.255.0 

 policy-group test1

  filter ip-tunnel acl 3600

  ip-tunnel access-route ip-route-list test1

 policy-group test2

  filter ip-tunnel acl 3600

  ip-tunnel access-route ip-route-list test2

 service enable