ASA的sslwebvpn.docVIP

代码: ASA(config)# show startup-config??: Saved: Written by enable_15 at 00:14:28.859 UTC Thu Dec 2 1999!ASA Version 8.0(2) !hostname ASAenable password 8Ry2YjIyt7RRXU24 encryptednames!interface Ethernet0/0nameif outsidesecurity-level 0ip address 51 !interface Ethernet0/1nameif insidesecurity-level 100ip address 54 !interface Ethernet0/2shutdownno nameifno security-levelno ip address!interface Ethernet0/3shutdownno nameifno security-levelno ip address!interface Ethernet0/4shutdownno nameifno security-levelno ip address!interface Ethernet0/5shutdownno nameifno security-levelno ip address!passwd 2KFQnbNIdI.2KYOU encryptedboot config disk0:/.private/startup-configftp mode passiveaccess-list 10 standard permit any access-list split standard permit ? ? ;定义需要分离的数据流access-list ipsec extended permit ip any pager lines 24mtu outside 1500mtu inside 1500ip local pool vpn_pool -54 mask ? ???;定义vpn的地址池no failovericmp unreachable rate-limit 1 burst-size 1asdm image disk0:/asdm-603.binno asdm history enablearp timeout 14400route outside 54 1timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout uauth 0:05:00 absolutedynamic-access-policy-record DfltAccessPolicy? ? aaa-server radiusgp protocol radius? ? ;定义认证协议为radiusaaa-server radiusgp (outside) host ? ? ;定义radius服务器地址key ? ? ;定义radius服务器的keyhttp server enablehttp outsideno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstartcrypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac? ? ;定义加密认证等参数crypto dynamic-map dynmap 1 set transform-set ESP-3DES-MD5? ? crypto map vpnmap 10 ipsec-isakmp dynamic dynmapcrypto map vpnmap interface outside? ???;将加密图应用到外部接口crypto isakmp enable outsidecrypto isa