ASA SSL ××× 无客户端连接
ASA分为无客户端(又包含clientless 和 thin client mode)
有客户端(使用SVC和anyconnect)
- ASA无客户端并不能为用户提供完全的网络访问服务,如想体验与远程访问IPSEC ×××@可以使用anyconnect
(注解@:其中一种是在的远程pc上安装cisco ipsce vpn client或者,另一种是通过ASA5505、pix、vpn3002 部分类型的路由器硬件客户端和ASA 建立远程的IPSEC vpn,不同于L2L ipsec vpn配置)
anyconnect的授权:从ASA8.2开始分为四种授权
- anyconnect premium
- anyconnect essentials
- anyconnect mobile
- share premium licensing
2. ASA 无客户端连接:最小配置
webvpn
enable Outside
username cisco password cisco
————————————————————————————————————————————
3.CISCO对clientless 除了默认提供http,https,CIFS和FTP外还可以通过一些插件来实现telnet/SSH、VNC、RDP,这些插件可以在cisco官网下载。
ASA1(config)# dir
Directory of disk0:/
72 -rwx 7598456 21:49:44 May 01 2010 asdm-615.bin
76 -rwx 2154944 08:38:30 Jul 08 2011 anyconnect-win-2.2.0140-k9.pkg
84 -rwx 879113 11:19:49 Jul 08 2011 rdp2-plugin.090211.jar
85 -rwx 405006 11:20:12 Jul 08 2011 ssh-plugin.080430.jar
86 -rwx 90142 11:20:26 Jul 08 2011 vnc-plugin.080130.jar
4.导入plugin : import webvpn plug-in protocol rdp2 disk0:/rdp2-plugin.090211.jar
ASA1(config)# import webvpn ?
exec mode commands/options:
customization Configure customization file
plug-in Configure plug-in options
translation-table Configure translation table
url-list Configure a list of URLs for use with Web×××
webcontent Configure webcontent
ASA1(config)# export webvpn ?
exec mode commands/options:
customization Configure customization object
plug-in Configure plugin
translation-table Configure translation table
url-list Configure a list of URLs for use with Web×××
webcontent Configure webcontent
5.当然用ASDM也可以导入
6.客户登陆后的效果