https://wiki.frotmail.nl/index.php?action=history&feed=atom&title=Cisco%3A_WebVPN 2026-07-28T05:07:45Z Revision history for this page on the wiki MediaWiki 1.46.0 https://wiki.frotmail.nl/index.php?title=Cisco:_WebVPN&diff=29&oldid=prev 2022-04-04T19:17:47Z

<p>Created page with &quot;De volgende config kan je als basis nemen voor een webvpn, Hier is het mogelijk: - de Thin Client (java applet met port forward) te starten, - de AnyConnect (Full ssl tunnel) te starten, - Interne URL&#039;s te bezoeken, - of om de smb share te browsen logging buffered 65535 aaa new-model aaa authentication login default local aaa authentication login webvpn_login local aaa authorization exec default local aaa session-id common ! crypto pki trustpoint VPN enro...&quot;</p> <p><b>New page</b></p><div>De volgende config kan je als basis nemen voor een webvpn, <br /> Hier is het mogelijk:<br /> - de Thin Client (java applet met port forward) te starten, <br /> <br /> - de AnyConnect (Full ssl tunnel) te starten,<br /> <br /> - Interne URL&#039;s te bezoeken,<br /> <br /> - of om de smb share te browsen<br /> <br /> logging buffered 65535<br /> aaa new-model<br /> aaa authentication login default local<br /> aaa authentication login webvpn_login local<br /> aaa authorization exec default local<br /> aaa session-id common<br /> !<br /> crypto pki trustpoint VPN<br /> enrollment selfsigned<br /> serial-number<br /> fqdn url.domain.tld<br /> subject-name cn=domain.tld<br /> revocation-check none<br /> rsakeypair VPNweb 2048 2048<br /> !<br /> !<br /> crypto pki certificate chain VPN<br /> certificate self-signed 02<br /> 30220273 338406D7 A0337221 02325172 804D5602 23865866 37040101 03040530<br /> [..]<br /> 9376722D CA362237 1154CD21 46400A5F 1A2E2786 3C2DF3<br /> quit<br /> !<br /> username admin privilege 15 secret 5 *************<br /> !<br /> ip local pool vpnusers 192.168.60.100 192.168.60.200<br /> !<br /> webvpn gateway gateway_1<br /> hostname url.domain.tld<br /> ip interface FastEthernet0/1 port 443<br /> ssl trustpoint VPN<br /> inservice<br /> !<br /> webvpn install svc flash:/webvpn/anyconnect-win-2.4.0202-k9.pkg sequence 1<br /> !<br /> webvpn install svc flash:/webvpn/anyconnect-linux-2.4.0202-k9.pkg sequence 2<br /> !<br /> webvpn context test<br /> title &quot;Domain.tld - WebVPN&quot;<br /> secondary-color white<br /> title-color #669999<br /> text-color black<br /> ssl authenticate verify all<br /> !<br /> cifs-url-list &quot;smbserver&quot;<br /> heading &quot;Cifs on SMBSERVER&quot;<br /> url-text &quot;Tweak&quot; url-value &quot;//[SMB_SERVERIP]&quot;<br /> !<br /> port-forward &quot;portforward_list_1&quot;<br /> local-port 3000 remote-server &quot;[REMOTE_RDP_IP]&quot; remote-port 3389 description &quot;RDP&quot;<br /> !<br /> policy group policy_1<br /> cifs-url-list &quot;smbserver&quot;<br /> port-forward &quot;portforward_list_1&quot;<br /> functions file-access<br /> functions file-browse<br /> functions svc-enabled<br /> mask-urls<br /> svc address-pool &quot;vpnusers&quot;<br /> svc keep-client-installed<br /> svc split dns &quot;[INTERNALDNS_IP]&quot;<br /> svc split include 192.168.0.0 255.255.255.0<br /> svc split include 192.168.60.0 255.255.255.0<br /> svc dns-server primary [INTERNAL_DNS]<br /> default-group-policy policy_1<br /> aaa authentication list webvpn_login<br /> gateway gateway_1<br /> inservice<br /> !<br /> <br /> [[Category:Cisco Voorbeeldconfigs]][[Category:Cisco]][[Category:Netwerk]]</div>

Eric