《ciscoasasslvpnclient配置示例》

《《ciscoasasslvpnclient配置示例》》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、SSLVPNClient(SVC)onASAwithASDMConfigurationExampleDocumentID:70511IntroductionPrerequisitesRequirementsComponentsUsedNetworkDiagramPreconfigurationTasksConventionsConfiguretheSSLVPNClientonanASAStep1.EnableWebVPNAccessontheASAStep2.InstallandEnabletheSSLVPNCliento

2、ntheASAStep3.EnableSVCInstallationonClientsStep4.EnableRekeyParameterResultsCustomizeYourConfigurationStep1.CreateaCustomGroupPolicyStep2.CreateaCustomTunnelGroupStep3.CreateaUserandAddThatUsertoYourCustomGroupPolicyVerifyAuthenticationConfigurationCommandsTrouble

3、shootHastheSVCestablishedasecuresessionwiththeASA?Aresecuresessionsbeingestablishedandterminatedsuccessfully?TipsCommandsNetProDiscussionForums−FeaturedConversationsRelatedInformationIntroductionSecureSocketLayer(SSL)VirtualPrivateNetwork(VPN)technologyallowsyouto

4、connectsecurelyfromanylocationtoaninternalcorporatenetworkusingoneofthesemethods:·ClientlessSSLVPN(WebVPN)ProvidesaremoteclientthatrequiresanSSL−enabledWebbrowsertoaccessHTTPorHTTPSWebserversonacorporatelocal−areanetwork(LAN).Inaddition,clientlessSSLVPNprovidesac

5、cessforWindowsfilebrowsingthroughtheCommonInternetFileSystem(CIFS)protocol.OutlookWebAccess(OWA)isanexampleofHTTPaccess.RefertoClientlessSSLVPN(WebVPN)onASAConfigurationExampleinordertolearnmoreabouttheClientlessSSLVPN.·Thin−ClientSSLVPN(PortForwarding)Providesar

6、emoteclientthatdownloadsasmallJava−basedappletandallowssecureaccessforTransmissionControlProtocol(TCP)applicationsthatusestaticportnumbers.Pointofpresence(POP3),SimpleMailTransferProtocol(SMTP),InternetMessageAccessProtocol(IMAP),secureshell(ssh),andTelnetareexamp

7、lesofsecureCisco−SSLVPNClient(SVC)onASAwithASDMConfigurationExampleaccess.Becausefilesonthelocalmachinechange,usersmusthavelocaladministrativeprivilegestousethismethod.ThismethodofSSLVPNdoesnotworkwithapplicationsthatusedynamicportassignments,suchassomefiletransfe

8、rprotocol(FTP)applications.RefertoThin−ClientSSLVPN(WebVPN)onASAwithASDMConfigurationExampleinordertolearnmoreabouttheThin−ClientSSLVPN.Note:UserDatagra