SSL VPN enterprise-level configuration practice

The network topology is as follows:

User requirements: Users access the company's intranet through the Internet and access intranet services in different VLANs through Layer 3 switches.

Web Design: 

• VLAN10：192.168.10.0/24；
• VLAN20：192.168.20.0/24；
• VLAN30：192.168.99.0/24；
• WEB-Server：192.168.99.101；
• FTP-Server：192.168.99.102；
• External user address: 100.1.1.101, gateway 100.1.1.254;

1. Basic environment configuration

PC address configuration: 

host1> ip 192.168.10.1 255.255.255.0 192.168.10.254
host2> ip 192.168.10.2 255.255.255.0 192.168.10.254
host3> ip 192.168.20.3 255.255.255.0 192.168.20.254
host4> ip 192.168.20.4 255.255.255.0 192.168.20.254

Switch VLAN configuration:

<CE6800_SW1>system-view immediately
[CE6800_SW1]vlan batch 10 20 99
[CE6800_SW1]int g 1/0/11
[CE680