CISCO ASA 5525 VPN 配置命令100894-asasvc7-x.pdf

《CISCO ASA 5525 VPN 配置命令100894-asasvc7-x.pdf》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ASA7.2(2):SSLVPNClient(SVC)forPublicInternetVPNonaStickConfigurationExampleDocumentID:100894ContentsIntroductionPrerequisitesRequirementsComponentsUsedConventionsBackgroundInformationConfigureNetworkDiagramASA7.2(2)ConfigurationsUsingASDM5.2(2)ASA7.2(2)CLIConfigurationEstablishtheSSLVPNConnect

2、ionwithSVCVerifyTroubleshootRelatedInformationIntroductionThisdocumentdescribeshowtosetupanAdaptiveSecurityAppliance(ASA)7.2.2toperformSSLVPNonastick.ThissetupappliestoaspecificcaseinwhichtheASAdoesnotallowsplittunnelingandusersconnectdirectlytotheASAbeforetheyarepermittedtogototheInternet.Not

3、e:InASAversion7.2.2,theintra−interfacekeywordofthesame−security−trafficpermitconfigurationmodecommandallowsalltraffictoenterandexitthesameinterface(notjustIPsectraffic).PrerequisitesRequirementsEnsurethatyoumeettheserequirementsbeforeyouattemptthisconfiguration:·ThehubASASecurityApplianceneeds

4、torunversion7.2.2·CiscoSSLVPNClient(SVC)1.xNote:DownloadtheSSLVPNClientpackage(sslclient−win*.pkg)fromCiscoSoftwareDownload(registeredcustomersonly).CopytheSVCtotheflashmemoryontheASA.TheSVCistobedownloadedtotheremoteusercomputersinordertoestablishtheSSLVPNconnectionwiththeASA.RefertoInstallin

5、gtheSVCSoftwaresectionoftheCiscoSecurityApplianceCommandLineConfigurationGuide,Version7.2formoreinformation.ComponentsUsedTheinformationinthisdocumentisbasedonthesesoftwareandhardwareversions:·Cisco5500SeriesAdaptiveSecurityAppliance(ASA)thatrunssoftwareversion7.2(2)·CiscoSSLVPNClientversionfo

6、rWindows1.1.4.179·PCthatrunsWindows2000ProfessionalorWindowsXP·CiscoAdaptiveSecurityDeviceManager(ASDM)version5.2(2)Theinformationinthisdocumentwascreatedfromthedevicesinaspecificlabenvironment.Allofthedevicesusedinthisdocumentstartedwithacleared(default)configuration.Ifyournetworkislive,makes

7、urethatyouunderstandthepotentialimpactofanycommand.ConventionsRefertotheCiscoTechnicalTipsConventionsformoreinformationondocumentconventions.BackgroundInformationTheSSLVPNClient(SVC)isaVPNtunnelingtechnologythatgivesremoteusersthebenefi