HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
cancel
Showing results for 
Search instead for 
Did you mean: 

MSR sslvpn

 
MJaat
Occasional Contributor

MSR sslvpn

Hi,

 

Version :

HPE Comware Software, Version 7.1.064, Release 0605P13

HPE MSR2003

 

 

Howto to make client to site VPN with sslvpn?

Is there more information about sslvpn?

is there client software for Windows 7/8/10?

Is this some leftower from H3C? will this be eventually removed?

 

 

[mainkex]display sslvpn gateway
Gateway name: norsslvpn
  Operation state: Up
  IP: 0.0.0.0  Port: 9878
  Front VPN instance: Not configured

[mainkex]display sslvpn context
Context name: norsslvpn
  Operation state: Up

...

 

1 REPLY
MJaat
Occasional Contributor

Re: MSR sslvpn

Got it somewhat working.

 

local-user testi class network
 password simple testi
 service-type advpn
 service-type ike
 service-type lan-access
 service-type portal
 service-type ppp
 service-type sslvpn
 authorization-attribute acl 3000
 authorization-attribute user-role network-operator
 authorization-attribute sslvpn-policy-group norsslvpn


sslvpn ip address-pool norsslvpn 192.168.19.2 192.168.19.22
#
sslvpn gateway norsslvpn
 ip address 0.0.0.0 port 9878
 service enable
#
sslvpn context norsslvpn
 gateway norsslvpn
 ip-tunnel address-pool norsslvpn mask 255.255.255.0
 uri-acl norsslvpn
  rule 0 permit uri http://*
  rule 5 permit uri https://*
 port-forward-item norsslvpn
# Have we server on address 192.168.16.230 port 19032. local-port 19032 local-name 0.0.0.0 remote-server 192.168.16.230 remote-port 19032 port-forward norsslvpn resources port-forward-item norsslvpn ip-route-list norsslvpn include 192.168.16.0 255.255.255.0 ip-route-list test url-list norsslvpn heading testi url samplevpn url-value http://google.com policy-group norsslvpn resources port-forward norsslvpn filter web-access uri-acl norsslvpn ip-tunnel access-route force-all resources url-list norsslvpn log user-login enable log resource-access enable service enable

 

this seem only to forward tcp either as webproxy or as local proxy trought sslvpn_plugin.exe(whis is basically service) or java tcpclient.jnlp

If used by .exe or .jnlp then address http://127.0.0.1:19032/ can be used from any client.

 

Not useful to me.