Wednesday, November 11, 2009

Cisco SSL Anyconnect VPN example

config t

webvpn

svc image disk0:/anyconnect-win-2.0.0343-k9.pkg 1

tunnel-group-list enable

enable outside

svc enable

exit

ip local pool SSLClientPool 192.168.100.1-192.168.100.50 mask 255.255.255.0

access-list NONAT extended permit ip 192.168.5.0 255.255.255.0 192.168.100.0 255.255.255.0

access-list vpnssl-split extended permit ip 192.168.5.0 255.255.255.0 192.168.100.0 255.255.255.0

nat (inside) 0 access-list NONAT

username userA password test123

username userA attributes

service-type remote-access

exit

username userB password test12345

username userB attributes

service-type remote-access

exit

group-policy SSLCLientPolicy internal

group-policy SSLCLientPolicy attributes

dns-server value 192.168.1.51 192.168.1.61

wins-server value 192.168.1.51 192.168.1.61

address-pools value SSLClientPool

split-tunnel-policy tunnelspecified

split-tunnel-network-list value vpnssl-split

webvpn

vpn-tunnel-protocol svc

svc keep-installer installed

exit

sysopt connection permit-vpn

tunnel-group SSLClientProfile type remote-access

tunnel-group SSLClientProfile general-attributes

default-group-policy SSLCLientPolicy

tunnel-group SSLClientProfile webvpn-attributes

group-alias SSLVPNClient enable

exit

wr mem

wr stand

debug command

sh vpn-sessiondb svc,

0 comments:

Post a Comment