Shulou(Shulou.com)06/01 Report--

The basic principle of virtual private network is understood through remote access to virtual private network-EASY virtual private network

1.SSL virtual private network can be deployed in the following three ways

Clientless mode

In fact, clientless mode is not completely client-free, but uses a web browser on the user's computer for remote access without the need for other software.

Thin client mode (also known as port translation mode)

Thin client mode provides remote access to TCP services

Fat client mode (also known as tunnel mode or full tunnel client mode)

Fat client mode provides remote access to a large number of applications and provides full network layer (layer 3) access to all applications by downloading the SSL virtual private network client

Configuration case

Requirements: xp can access 2008R2's ftp service and web service

Configure IP, all go except R1 by default.

The ASA configuration is as follows:

Ciscoasa (config) # int e0/0ciscoasa (config-if) # ip add 192.168.1.1ciscoasa (config-if) # no shutdown ciscoasa (config-if) # nameif insideciscoasa (config-if) # security-level 100ciscoasa (config) # int e0/1ciscoasa (config-if) # ip add 202.1.1.1 ciscoasa (config-if) # no shutdown ciscoasa (config-if) # nameif outsideciscoasa (config-if) # security-level 0ciscoasa (config) # route outside 00 202.1.1.2

R1 is configured as follows:

R1 (config) # int f0/0R1 (config-if) # ip add 202.1.1.2 255.255.255.0R1 (config-if) # no shutdown R1 (config) # int f2/0R1 (config-if) # ip add 202.2.2.1 255.255.255.0R1 (config-if) # no shutdown R1 (config) # int f1/0R1 (config-if) # ip add 203.3.3.1 255.255.255.0R1 (config-if) # no shutdown

R2 is configured as follows:

R2 (config) # int f0/0R2 (config-if) # ip add 203.3.3.100 255.255.255.0R2 (config-if) # no shutdown R2 (config-if) # exitR2 (config) # ip http server R2 (config) # ip route 0.0.0.0 0.0.0 203.3.3.1

Open two hosts to configure IP and services

XP configuration

The 2008R2 configuration is as follows:

Create two folders, one for ftp and one for web

Installation services are as follows:

Configure on ASA1

Access ASA's 202.1.1.1 with XP

This is successful. You can use XP to remotely 2008R2.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.