在本实验中，为了使路由器支持ssl vpn需要上传并安装SSL-VPN-Client到路由器。由此为前提来模拟ssl vpn的安全技术。ssl vpn配置下节实验做介绍。
在上传安装ssl-vpn-client之前，先搭建tftp服务器，本次试验用的是cisco tftp server 1.1。测试路由器和tftp server的连通性
R1#ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/17/36 ms
R1#
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/17/36 ms
R1#
路由器和tftp服务器成功通信，下面我来上传ssl-vpn-client
-
释放disk0空间用作存储上传文件
R1#format disk0:
Format operation may take a while. Continue? [confirm]
Format operation will destroy all data in "disk0:". Continue? [confirm]
Format: Drive communication & 1st Sector Write OK...
Writing Monlib sectors.
.....................................................................................................................................................
Monlib write complete
Format: All system sectors written. OK...
Format: Total sectors in formatted partition: 130883
Format: Total bytes in formatted partition: 67012096
Format: Operation completed successfully.
Format: Total bytes in formatted partition: 67012096
Format: Operation completed successfully.
Format of disk0 comple
- 上传ssl-vpn-client
R1#copy tftp: disk0:
Address or name of remote host []? 192.168.1.2
Source filename []? sslclient.pkg
Destination filename [sslclient.pkg]?
Accessing tftp://192.168.1.2/sslclient.pkg...
Loading sslclient.pkg from 192.168.1.2 (via FastEthernet1/0): !!!!!!!!!
[OK - 2208871 bytes]
Address or name of remote host []? 192.168.1.2
Source filename []? sslclient.pkg
Destination filename [sslclient.pkg]?
Accessing tftp://192.168.1.2/sslclient.pkg...
Loading sslclient.pkg from 192.168.1.2 (via FastEthernet1/0): !!!!!!!!!
[OK - 2208871 bytes]
2208871 bytes copied in 56.880 secs (38834 bytes/sec)
- 安装ssl-vpn-client
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#webvpn install svc disk0:/sslclient.pkg
SSLVPN Package SSL-VPN-Client : installed successfully
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#webvpn install svc disk0:/sslclient.pkg
SSLVPN Package SSL-VPN-Client : installed successfully
R1(config)#
成功上传并安装了ssl-vpn-client，这台路由器支持ssl vpn了。
本文出自 “阅微草堂笔记” 博客，请务必保留此出处http://loverain.blog.51cto.com/2271638/824709
