Remote access virtual private networks --- SSL virtual private network

The basic principle of virtual private network through a virtual private network ------ EASY virtual private network remote access to learn

1.SSL virtual private network can be deployed in the following three ways

• No client mode

Clientless mode is actually not entirely without the client, but using a web browser on a user's computer for remote access, without the need for additional software

• Thin Client mode (also known as port conversion mode)

Thin-client mode provides remote access to TCP-based services

• Fat client mode (also called tunnel mode or full tunnel client mode)

Fat client mode provides remote access to a large number of applications supported virtual private network client can download SSL, provide full network layer for all applications (third floor) access,

Configuration Examples

Requirements: xp 2008R2 can access the ftp service and web service

Configuring IP, in addition to R1 does not go by default, others are gone

ASA configuration is as follows:

ciscoasa(config)# int e0/0
ciscoasa(config-if)# ip add 192.168.1.1
ciscoasa(config-if)# no shutdown 
ciscoasa(config-if)# nameif inside
ciscoasa(config-if)# security-level 100
ciscoasa(config)# int e0/1
ciscoasa(config-if)# ip add 202.1.1.1 
ciscoasa(config-if)# no shutdown 
ciscoasa(config-if)# nameif outside
ciscoasa(config-if)# security-level 0
ciscoasa(config)# route outside 0 0 202.1.1.2

R1 configured as follows:

R1(config)#int f0/0
R1(config-if)#ip add 202.1.1.2 255.255.255.0
R1(config-if)#no shutdown 
R1(config)#int f2/0
R1(config-if)#ip add 202.2.2.1 255.255.255.0
R1(config-if)#no shutdown 
R1(config)#int f1/0
R1(config-if)#ip add 203.3.3.1 255.255.255.0
R1(config-if)#no shutdown 

R2 configured as follows:

R2(config)#int f0/0
R2(config-if)#ip add 203.3.3.100 255.255.255.0
R2(config-if)#no shutdown 
R2(config-if)#exit
R2(config)#ip http  server 
R2(config)#ip route  0.0.0.0 0.0.0.0 203.3.3.1

Open both host and configure IP Services

XP Configuration

2008R2 configuration is as follows:

Create two folders, one for ftp, a web

Installation services are as follows:

Configured on ASA1

Access the ASA with XP 202.1.1.1

This is already a success, you can use the XP Remote 2008R2