#从windows CA 中导出CA及申请服务器证书 pki import domain zm der ca filename certnew.cer pki import domain zm p12 local filename ssl.pfx # radius scheme zm primary authentication 192.168.9.2 key authentication simple 123123 user-name-format without-domain # pki domain zm public-key rsa signature name zm undo crl check enable # ssl server-policy zm pki-domain zm # sslvpn gateway zm ip address 1.2.3.4 ssl server-policy zm service enable # interface SSL×××-AC1 ip address 10.200.200.1 255.255.255.224 # sslvpn ip address-pool zm 10.200.200.2 10.200.200.30 # security-zone name Trust import interface SSL×××-AC1 # sslvpn context zm gateway zm ip-tunnel interface SSL×××-AC1 ip-tunnel address-pool zm mask 27 ip-route-list zm include 192.168.0.0 255.255.0.0 policy-group zm filter ip-tunnel 3000 ip-tunnel access-route ip-route-list zm aaa domain zm service enable # user-group vpnuser authorization-attribute sslvpn-policy-group vpnuser # domain zm # authorization-attribute user-group vpnuser authentication sslvpn ldap-scheme zm authorization sslvpn none accounting sslvpn none #
H3C SSLVPN Radius AUTH
原创
©著作权归作者所有:来自51CTO博客作者nonono11的原创作品,请联系作者获取转载授权,否则将追究法律责任
![](https://ucenter.51cto.com/images/noavatar_middle.gif)
提问和评论都可以,用心的回复会被更多人看到
评论
发布评论
相关文章
-
h3c入门
&n
h3c 知识讲解 -
H3C OSPF
ospf
ospf