Thursday, July 19, 2012

SSL VPN over DDNS on Cisco 877W

conf t
 ip domain name domain.com
 cry key gen rsa general-keys label SSL_VPN mod 1024
 crypto pki trustpoint SSL
 enrollment selfsigned
 fqdn none
 subject-name CN=domain.com
 revocation-check crl
 rsakeypair SSL_VPN
 cry pki enr SSL

webvpn gateway ssl-gw1
ip interface Dialer0 port 443
hostname webvpn1
ssl trustpoint SSL
inservice
!

webvpn context vpn1
ssl authenticate verify all
!
url-list "eng"
   url-text "wwwin-eng" url-value "http://wwwin-eng.cisco.com"
!
policy group vpn1
   url-list "eng"
!
 port-forward "MGMT"
   local-port 3000 remote-server "192.168.1.110" remote-port 8080 description "MGMT"
 !
 port-forward "SHARE"
   local-port 3001 remote-server "192.168.1.110" remote-port 80 description "SHARE"
 !
default-group-policy vpn1
gateway ssl-gw1
inservice
!

ip http server
ip http secure-server
ip http access-class 6

SSL VPN and Dynamic DNS - ddns on IOS
Cisco IOS SSL VPN Gateways and Contexts
Cisco SSL VPN Configuration
Cisco VPN Client and Thin-Client SSL VPN (WebVPN) in the same 877 router
Downloading and Installing Cisco Router and Security Device Manager

No comments:

Post a Comment