HP MSR Series Configuration Manual page 88

# Configure the IP address of interface GigabitEthernet 2/0/1, which is connected to the SSL
VPN user.
<Router> system-view
[Router] interface gigabitethernet 2/0/1
[Router-GigabitEthernet2/0/1] ip address 192.168.1.70 24
[Router-GigabitEthernet2/0/1] quit
# Configure the IP address of interface GigabitEthernet 2/0/2, which is connected to the LDAP
server.
[Router] interface gigabitethernet 2/0/2
[Router-GigabitEthernet2/0/2] ip address 10.1.1.2 24
[Router-GigabitEthernet2/0/2] quit
# Create PKI domain sslvpn and obtain the CA and local certificates (see "Configuring PKI").
(Details not shown.)
# Create SSL server policy myssl.
[Router] ssl server-policy myssl
# Specify PKI domain sslvpn for the SSL server policy.
[Router-server-policy-myssl] pki-domain sslvpn
[Router-server-policy-myssl] quit
# Set the SSL VPN gateway name to g1.
[Router] sslvpn gateway g1
# Specify SSL server policy myssl for the SSL VPN gateway.
[Router-gateway-g1] ssl server-policy myssl
# Set the gateway IP address to 192.168.1.70 and port number to 8080.
[Router-gateway-g1] ip address 192.168.1.70 port 8080
# Enable the SSL VPN gateway.
[Router-gateway-g1] service enable
[Router-gateway-g1] quit
# Create SSL VPN context aaa.
[Router] sslvpn context aaa
# Specify gateway g1 for the SSL VPN context.
[Router-sslvpn-context-aaa] gateway g1
# Specify domain bbb for authentication, authorization, and accounting of SSL VPN users in
the context.
[Router-sslvpn-context-aaa] aaa domain bbb
# Create SSL VPN policy group pg1.
[Router-sslvpn-context-aaa] policy-group pg1
# Set the connection idle timeout timer to 120 seconds.
[Router-sslvpn-context-aaa-policy-group-pg1] timeout idle 120
[Router-sslvpn-context-aaa-policy-group-pg1] quit
# Enable the SSL VPN context.
[Router-sslvpn-context-aaa] service enable
# Configure an LDAP server.
[Router] ldap server ldap1
# Specify the IP address of the LDAP server.
[Router-ldap-server-ldap1] ip 10.1.1.1
# Specify the administrator DN.
[Router-ldap-server-ldap1] login-dn cn=administrator,cn=users,dc=ldap,dc=com
73