防火墙上ssl vpn开启的是ip接入方式，客户端拨上去后，获取了ip地址。就是不能访问指定的业务。

您好，请知：

以下是SSL VPN IP接入的关键配置点，请参考：

[SSL_VPN]sslvpn gateway james

[SSL_VPN-sslvpn-gateway-james]ip address 10.1.1.1

[SSL_VPN-sslvpn-gateway-james]service enable

[SSL_VPN-sslvpn-gateway-james]quit

[SSL_VPN]sslvpn context james

[SSL_VPN-sslvpn-context-james]gateway james

[SSL_VPN-sslvpn-context-james]ip-tunnel address-pool weijianing mask 24

[SSL_VPN-sslvpn-context-james]ip-tunnel interface SSLVPN-AC 1

[SSL_VPN-sslvpn-context-james]ip-route-list james

[SSL_VPN-sslvpn-context-james-route-list-james]include 10.0.0.0 24

[SSL_VPN-sslvpn-context-james-route-list-james]quit

[SSL_VPN-sslvpn-context-james-policy-group-ip]ip

[SSL_VPN-sslvpn-context-james-policy-group-ip]ip-tunnel access-route ip-route-list james

[SSL_VPN-sslvpn-context-james-policy-group-ip]filter ip-tunnel acl 3000

[SSL_VPN-sslvpn-context-james-policy-group-ip]quit

[SSL_VPN-sslvpn-context-james]service enable

[SSL_VPN-sslvpn-context-james]quit

需注意[SSL_VPN-sslvpn-context-james-policy-group-ip]filter ip-tunnel acl 3000 这里的SSL VPN的安全策略是否有放通。

同时检查下域间策略是否已放通。

最后检查下[SSL_VPN-sslvpn-context-james-route-list-james]include 10.0.0.0 24 是否配置了路由指向到内网。