|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
#从windows CA 中导出CA及申请服务器证书
pki
import
domain zm der ca filename certnew.cer
pki
import
domain zm p12
local
filename ssl.pfx
#
radius scheme zm
primary authentication 192.168.9.2
key authentication simple 123123
user-name-
format
without-domain
#
pki domain zm
public-key rsa signature name zm
undo crl check
enable
#
ssl server-policy zm
pki-domain zm
#
sslvpn gateway zm
ip address 1.2.3.4
ssl server-policy zm
service
enable
#
interface SSLVPN-AC1
ip address 10.200.200.1 255.255.255.224
#
sslvpn ip address-pool zm 10.200.200.2 10.200.200.30
#
security-zone name Trust
import
interface SSLVPN-AC1
#
sslvpn context zm
gateway zm
ip-tunnel interface SSLVPN-AC1
ip-tunnel address-pool zm mask 27
ip-route-list zm
include 192.168.0.0 255.255.0.0
policy-group zm
filter ip-tunnel 3000
ip-tunnel access-route ip-route-list zm
aaa domain zm
service
enable
#
user-group vpnuser
authorization-attribute sslvpn-policy-group vpnuser
#
domain zm
# authorization-attribute user-group vpnuser
authentication sslvpn ldap-scheme zm
authorization sslvpn none
accounting sslvpn none
#
|
本文转自 nonono11 51CTO博客，原文链接：http://blog.51cto.com/abian/1962717，如需转载请自行联系原作者
