olicygroup后默认使用的策略组
注意
在IOS中，如果地址池不和内网在一个段，则需创建一个和地址池在同一网段的loopback接口作为vp
客户端的网关。
还可以在co
text中指定virtualhost，类似于iis中的文件头，允许多个主机映射到同一个IP地址
同时co
text中还可以设置web登陆框的样式，比如logo，title等
5、完整配置
R1showru
i
gco
figBuildi
gco
figuratio
Curre
tco
figuratio
3223bytesversio
124
524524
fCiscoSSLVPN配置实例servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsec
oservicepassworde
cryptio
host
ameR1bootstartmarkerboote
dmarkeraaa
ewmodelaaaauthe
ticatio
logi
defaultlocalaaaauthe
ticatio
logi
webvp
localaaasessio
idcommo
resourcepolicyipcef
624624
fCiscoSSLVPN配置实例cryptopkitrustpoi
tTPselfsig
ed4294967295e
rollme
tselfsig
edsubject
amec
IOSSelfSig
edCertificate4294967295revocatio
check
o
ersakeypairTPselfsig
ed4294967295cryptopkicertificatechai
TPselfsig
ed4294967295certificateselfsig
ed01
3082023A308201A3A003020102020101300D06092A864886F70D010104050030
31312F302D06035504031326494F532D53656C662D5369676E65642D43657274
696669636174652D34323934393637323935301E170D331393039
30335A170D32330303030305A3031312F302D0603550403132649
4F532D53656C662D5369676E65642D43657274696669636174652D3432393439
724724
fCiscoSSLVPN配置实例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
824824
fCiscoSSLVPN配置实例0D01010405000381
810025163F75E2AA335441139A9179DBDFED2529DF5A972F
C2BFDE0E0279D1F58D30CAC759BE79C685825281AB2D0B082CA84D0185A4DB19
8977BC829E59F764ADE75E229A7FF37A9D83819A2287BE75773FAA32D38DD3C2
2C0DF23F7D45D7A3E8006C1A6B9E0540124832416EEAA0FFB31240F394044BCB
75210037FEF5AD15F49Bquit
user
ameuser1password0123i
terfaceLoopback0
924924
fCiscoSSLVPN配置实例ipaddress111112552552550i
terfaceFastEther
et00ipaddress19216810102552552550duplexhalfi
terfaceSerial10ipaddress101112552552550serialrestartdelay0i
terfaceSerial11
oipaddressshutdow
serialrestartdelay0i
terfaceSerial12
oipaddressshutdow
serialrestartdelay0i
terfaceSerial13
oipr