ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka stáhnout pdf (Strana 148)

Chapter 17 SSL VPN

ZyWALL (ZLD) CLI Reference Guide

148

1 First of all, configure 10.1.1.254/24 for the IP address of interface ge2 which is an

external interface for public SSL VPN to access. Configure 172.16.10.254/24 for the IP

address of interface ge3 which is an internal network.

2 Create four address objects for the SSL VPN DHCP pool, DNS servers and the local

network for SSL VPN authenticated users to access.

3 Create an endpoint security profile named EPS-1. SSL VPN users’ computers must

install Windows XP and TrendMicro PC-Cillin Internet Security 2007. Besides, the PC-

Cillin anti-virus must be activated.

4 Create the SSL VPN user account named tester with password 1234,

Router(config)# interface ge2

Router(config-if-ge)# ip address 10.1.1.254 255.255.255.0

Router(config-if-ge)# exit

Router(config)# interface ge3

Router(config-if-ge)# ip address 172.16.10.254 255.255.255.0

Router(config-if-ge)# exit

Router(config)# address-object IP-POOL 192.168.100.1-192.168.100.10

Router(config)# address-object DNS1 172.16.5.1

Router(config)# address-object DNS2 172.16.5.2

Router(config)# address-object NETWORK1 172.16.10.0/24

Router(config)# eps profile EPS-1

Router(eps EPS-1)# matching-criteria all

Router(eps EPS-1)# os-type windows

Router(eps EPS-1)# windows-version windows-xp

Router(eps EPS-1)# anti-virus activate

Router(eps EPS-1)# anti-virus TrendMicro_PC-Cillin_Internet_Security_2007

detect-auto-protection enable

Router(eps EPS-1)# exit

Router(config)# username tester password 1234 user-type user

1 2 ... 143 144 145 146 147 148 149 150 151 152 153 ... 385 386

Žádné komentáře

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Uživatelská příručka Strana 148