Huawei AR1200 series Configuration Manual page 391

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
# Configure the Web proxy service.
[Router] sslvpn gateway market
[Router-sslvpn-market] service-type web-proxy resource market_web-proxy
[Router-sslvpn-market-wp-res-market_web-proxy] link http://10.138.10.1:80/
[Router-sslvpn-market-wp-res-market_web-proxy] quit
# Configure the port forwarding service to allow marketing personnel to access the mail server
and share desktop with the internal host 10.138.10.21.
[Router-sslvpn-market] service-type port-forwarding resource market_port-
forwarding
[Router-sslvpn-market-pf-res-market_port-forwarding] server ip-address 10.138.10.3
port 995
[Router-sslvpn-market-pf-res-market_port-forwarding] server ip-address
10.138.10.21 port 3389
[Router-sslvpn-market-pf-res-market_port-forwarding] quit
# Configure the IP forwarding service to allow marketing personnel to ping the internal hosts
10.138.10.64-10.138.10.95.
[Router-sslvpn-market] service-type ip-forwarding resource market_ip-forwarding
[Router-sslvpn-market-if-res-market_ip-forwarding] bind ip-pool market_pool
[Router-sslvpn-market-if-res-market_ip-forwarding] route-mode split
[Router-sslvpn-market-if-res-market_ip-forwarding] route-split ip address
10.138.10.64 mask 27
[Router-sslvpn-market-if-res-market_ip-forwarding] quit
[Router-sslvpn-market] quit
Step 6 Verify the configuration.
Open the Internet Explorer on the terminal, such as a computer, and enter https://1.1.1.1/sslvpn
to access the login page. Enter the user name and password, and select the virtual gateway
market. After authentication, you can see a resource list on the Web page, including the Web
server, mail server, and host for desktop sharing, and ping the hosts on
10.138.10.64-10.138.10.95.
----End
Configuration Files
#
sysname Router
#
aaa
local-user liming password cipher !9$"OZ$+1"-',917]_2Y71!!
local-user liming service-type sslvpn
local-user wangjun password cipher =S@P;D^[S_2)S(YTABR0IQ!!
local-user wangjun service-type sslvpn
#
interface Ethernet 2/0/0
ip address 1.1.1.1 255.255.255.0
#
interface Vlanif 10
ip address 10.138.10.254 255.255.255.0
#
ip pool company_pool
network 10.139.30.0 mask 24
#
sslvpn gateway market
extranet interface ethernet 2/0/0
intranet interface vlanif 10
bind domain default
Issue 01 (2012-04-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 SSL VPN Configuration
380