命令行配置:

[H3C]dis cu

#

version 5.20, ESS 1713L04, Standard

#

sysname H3C

#

ftp server enable

#

ipsec cpu-backup enable

#

domain default enable system

#

vlan 1

#

domain system

access-limit disable

state active

idle-cut disable

self-service-url disable

#

pki entity ssl # 配置PKI实体ssl，指定实体的通用名为ssl。

common-name ssl

organization-unit h3c-800

organization h3c

locality beijing

state beijing

country cn

#

pki domain ssl

ca identifier ssl

certificate request from ra

certificate request entity ssl

crl check disable

#

user-group system

#

local-user admin

password cipher .]@USE=B,53Q=^Q`MAF4<1!!

authorization-attribute level 3

service-type telnet

service-type ftp

#

ssl server-policy sslvpn

pki-domain ssl

#

interface Aux0

async mode flow

link-protocol ppp

#

interface NULL0

#

interface Ethernet7/0

port link-mode bridge

#

interface Ethernet7/1

port link-mode bridge

#

interface Ethernet7/2

port link-mode bridge

#

interface Ethernet7/3

port link-mode bridge

#

interface Ethernet7/4