MSR sslvpn

[MJaat]

Hi,

Version :

HPE Comware Software, Version 7.1.064, Release 0605P13

HPE MSR2003

Howto to make client to site VPN with sslvpn?

Is there more information about sslvpn?

is there client software for Windows 7/8/10?

Is this some leftower from H3C? will this be eventually removed?

[mainkex]display sslvpn gateway
Gateway name: norsslvpn
  Operation state: Up
  IP: 0.0.0.0  Port: 9878
  Front VPN instance: Not configured

[mainkex]display sslvpn context
Context name: norsslvpn
  Operation state: Up

...

[MJaat]

Got it somewhat working.

local-user testi class network
 password simple testi
 service-type advpn
 service-type ike
 service-type lan-access
 service-type portal
 service-type ppp
 service-type sslvpn
 authorization-attribute acl 3000
 authorization-attribute user-role network-operator
 authorization-attribute sslvpn-policy-group norsslvpn


sslvpn ip address-pool norsslvpn 192.168.19.2 192.168.19.22
#
sslvpn gateway norsslvpn
 ip address 0.0.0.0 port 9878
 service enable
#
sslvpn context norsslvpn
 gateway norsslvpn
 ip-tunnel address-pool norsslvpn mask 255.255.255.0
 uri-acl norsslvpn
  rule 0 permit uri http://*
  rule 5 permit uri https://*
 port-forward-item norsslvpn
  # Have we server on address 192.168.16.230 port 19032.
  local-port 19032 local-name 0.0.0.0 remote-server 192.168.16.230 remote-port 19032
 port-forward norsslvpn
  resources port-forward-item norsslvpn
 ip-route-list norsslvpn
  include 192.168.16.0 255.255.255.0
 ip-route-list test
 url-list norsslvpn
  heading testi
  url samplevpn url-value http://google.com
 policy-group norsslvpn
  resources port-forward norsslvpn
  filter web-access uri-acl norsslvpn
  ip-tunnel access-route force-all
  resources url-list norsslvpn
 log user-login enable
 log resource-access enable
 service enable

this seem only to forward tcp either as webproxy or as local proxy trought sslvpn_plugin.exe(whis is basically service) or java tcpclient.jnlp

If used by .exe or .jnlp then address http://127.0.0.1:19032/ can be used from any client.

Not useful to me.