分享一份ASA 9.2 版本的SSL VPN 配置,给有需要的人:
object network lan_network
subnet 10.1.5.0 255.255.255.0
nat (inside,outside) source static lan_network lan_network destination static NETWORK_OBJ_10.1.2.0_27 NETWORK_OBJ_10.1.2.0_27 no-proxy-arp route-lookup
group-policy sslvpn internal
group-policy GroupPolicy_sslvpn internal
group-policy GroupPolicy_sslvpn attributes
wins-server none
dns-server value 114.114.114.114
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified //隧道分离
split-tunnel-network-list value 130 //隧道分离
default-domain none
tunnel-group sslvpn type remote-access
tunnel-group sslvpn general-attributes
address-pool sslvpn
default-group-policy GroupPolicy_sslvpn
tunnel-group sslvpn webvpn-attributes
group-alias sslvpn enable