season22 发表于 2018-7-20 07:15:21

Cisco SSL*** Client Profile anyconnect secure mobility client

  <?xml version="1.0" encoding="UTF-8"?>
  <AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/">
  <ServerList>
  <HostEntry>
  <HostName>ABC CN SSL***</HostName>
  <HostAddress>210.13.*3.112</HostAddress>
  </HostEntry>
  </ServerList>
  </AnyConnectProfile>

[*]  上传 上面的这个文件到 ASA的flash中:
[*]  执行下面的命令 在Tunnel Group中指定的
  group-policy GroupPolicy_Anyconnect_*** attributes
  wins-server value 192.168.20.24 192.168.20.23
  dns-server value 192.168.20.24 192.168.20.23
  ***-simultaneous-logins 10
  ***-idle-timeout 240
  ***-tunnel-protocol ssl-client ssl-clientless
  password-storage enable
  split-tunnel-policy tunnelspecified
  split-tunnel-network-list value split
  default-domain value ABC.CN
  web***
  anyconnect profiles value Anyconnect_***_client_profile type user
[*]  查看
  web***
  enable outside
  anyconnect image disk0:/anyconnect-win-2.5.2014-k9.pkg 1
  anyconnect profiles Anyconnect_***_client_profile disk0:/Cisco_AnyConnect_Profiles.xml
  anyconnect enable
  tunnel-group-list enable
  那么最后的效果是:
  在 windows 7 的C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile下面会有 Cisco_AnyConnect_Profiles.xml的一个文件,同时在连接cisco的***后,会在下次再连接时出现对应的profile名字:
页: [1]
查看完整版本: Cisco SSL*** Client Profile anyconnect secure mobility client