IOS web SSl vpn 参考配置 配置CSD cisco Secure Desktop

本文格式为Word版，下载可任意编辑——IOSwebSSlvpn参考配置配置CSDciscoSecureDesktop

Router(config)#webvpninstallcsd?WORDFilenameofinstallingpackage

Router(config)#webvpninstallcsdsecuredesktop-ios-5-k9.pkgSSLVPNPackageCisco-Secure-Desktop:installedsuccessfully

Router(config)#webvpninstallsvcsslclient-win-73.pkgSSLVPNPackageSSL-VPN-Client:installedsuccessfully

Router#d

*May2906:55:46.135:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleirDirectoryofflash:/

1-rw-31403024May29202306:40:46+00:00c2801-adventerprisek9-mz.124-6.T.bin3-rw-1038May29202306:50:28+00:00home.shtml

4-rw-1821May29202306:51:06+00:00sdmconfig-2801.cfg5-rw-113152May29202306:51:46+00:00home.tar6-rw-1164288May29202306:52:28+00:00common.tar7-rw-6036480May29202306:53:24+00:00sdm.tar8drw-0May29202306:55:42+00:00webvpn

2-rw-527849May29202306:52:06+00:00128MB.sdf

64012288bytestotal(22630400bytesfree)Router#cdwebvpnRouter#dir

Directoryofflash:/webvpn/

9-rw-1697952May29202306:55:22+00:00sdesktop.pkg10-rw-416354May29202306:55:42+00:00svc.pkg

64012288bytestotal(22630400bytesfree)

====================================================

Router>enPassword:Router#shrun

Buildingconfiguration...

Currentconfiguration:4072bytes!

version12.4

servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!

hostnameRouter!

boot-start-markerboot-end-marker!

loggingbuffered51200warnings

enablesecret5$1$x3CO$gM0KpAYfEagiDDTWDA1z70!

aaanew-model!!

aaaauthenticationlogindefaultlocal

aaaauthenticationloginsdm_vpn_xauth_ml_1localaaaauthenticationloginsdm_vpn_xauth_ml_2localaaaauthorizationexecdefaultlocal!

aaasession-idcommon!

resourcepolicy!ipcef!

voice-card0!

cryptopkitrustpointTP-self-signed-3377104332enrollmentselfsigned

subject-namecn=IOS-Self-Signed-Certificate-3377104332revocation-checknone

rsakeypairTP-self-signed-3377104332!!

cryptopkicertificatechainTP-self-signed-3377104332certificateself-signed01

3082023F308201A8A003020102023101300D06092A864886F70D01010405003031312F302D06035504031326494F532D53656C662D5369676E65642D43657274696669636174652D33333737313034333332301E170D3037303532393033333334355A170D3230303130313030303030305A3031312F302D06035504031326494F532D53656C662D5369676E65642D43657274696669636174652D3333373731303433333230819F300D06092A864886F70D010101050003818D0030818902818100A7D8DC74B6A8FF07D5E87C7AE4DC24D15FD4EE1DF6E7E42AF481976A1FB7

AB6376C0EEFC1164BE349DF8C067B545D3ED01954DBCB85CA482439F64F857A0

1E501263C9D004C578B36EBAB9F2165731175D92F205233402FCD1CEC07E58FD

62A7B18844F9F16DEEDFA97F27827F0D22A0461FD4835EB34061E5ABB7AFFC1F

E8FB0203010001A3673065300F0603551D130101FF040530030101FF30120603551D11040B30098207526F757465722E301F0603551D23041830168014728D7796E5307F9B9CA623088478E9103DFF3FCB301D0603551D0E04160414728D7796

E5307F9B9CA623088478E9103DFF3FCB300D06092A864886F70D010104050003

8181001D1AB7916C7DED5C056E3221FD521C8E4F716A01FD76D8B046601CE98F

B9F1CB83256A4DD4A175795808BBB365D0108ECA35D40111A58146B4CCA6370A

BACE265C7C5DDBBBF52C3736F0C7BA42D2469B5274206B7D970B301A2688CBC7

21B5CA8A94C1A0EE33E75836DEB270D373B082A187CBB536EF98C08BD3522BCF3230CCquit

usernameXXXXXXprivilege15secret5$1$uiyB$cO9v.n9dL64.0Rh3nkk/!!!!!!!

interfaceLoopback0

descriptionDonotdelete-SDMWebVPNgeneratedinterfaceipaddress52ipnatinside

ipvirtual-reassembly!

interfaceFastEthernet0/0

ipaddress22duplexauto

speedauto!

interfaceFastEthernet0/1

ipaddress492ipnatoutside

ipvirtual-reassemblyduplexautospeedauto!

iplocalpoolwebvpnuser2325!!

iphttpserver

iphttpauthenticationlocaliphttpsecure-server

ipnatinsidesourcestatictcp44344443extendable!!!!!!!

control-plane!!!!!!!!!

linecon0lineaux0linevty04

transportinputtelnetssh!

schedulerallocate200001000!

webvpngatewayvpngatewayipaddress4port443

ssltrustpointTP-self-signed-3377104332inservice!

webvpninstallsvcflash:/webvpn/svc.pkg

!

webvpninstallcsdflash:/webvpn/sdesktop.pkg!

webvpncontextDefault_contextsslauthenticateverifyall!

noinservice!!

webvpncontextXXXXXX_ssltitle-color#669999secondary-colorwhitetext-colorblack

sslauthenticateverifyall!

url-list\heading\

url-text%url-text\!!

policygrouppolicy_1url-list\

functionssvc-enabled

svcaddress-pool\

svcdefault-domain\svckeep-client-installed

svcdns-serverprimary0svcwins-serverprimary0default-group-policypolicy_1

aaaauthenticationlistsdm_vpn_xauth_ml_2gatewayvpngatewaydomainXXXXXXmax-users1000csdenableinservice!end

Router#dir

Directoryofflash:/

1-rw-31403024May29202306:40:46+00:00c2801-adventerprisek9-mz.124-6.T.bin8-rw-1038May29202307:41:24+00:00home.shtml

9-rw-1821May29202307:42:04+00:00sdmconfig-2801.cfg10-rw-113152May29202307:42:44+00:00home.tar11-rw-1164288May29202307:43:26+00:00common.tar

12-rw-6036480May29202307:44:22+00:00sdm.tar2drw-0May29202307:32:16+00:00webvpn

7-rw-527849May29202307:43:04+00:00128MB.sdf

13-rw-1697952