Cisco Systems 6500 Functions file-access, Hide-url-bar, Nbns-list name, Port-forward name, Svc

Page 39

Chapter 2 Commands for the Catalyst 6500 Series Switch WebVPN Module

policy group

Table 2-3 Group-policy Commands

Command

Purpose and Guidelines

Defaults

 

 

 

functions {file-access

Specifies the file function as follows:

All values are disabled.

file-browse

Note You must enable file-accessbefore you can enable

 

file-entry

 

file-browse or file-entry.

 

svc-enabled

 

 

 

svc-required}

file-access—Allows you to access the file servers that are listed

 

 

 

 

on the home page.

 

 

file-browse—Allows you to browse file servers. When you

 

 

disable this option, you are denied entry to a file server.

 

 

file-entry—Allows you to alter a file in a file server.

 

 

svc-enabled—Allows the user of the group to use tunnel mode.

 

 

If the SVC fails to install on the end user's PC, the end user can

 

 

continue to use clientless mode or thin-client mode.

 

 

svc-required—Tunnel mode is required. If the SVC fails to

 

 

install on the end user’s PC, the end user cannot use other

 

 

modes.

 

 

 

 

hide-url-bar

Disables the URL bar on the portal page.

 

 

Note This command applies only to clientless mode.

 

 

 

 

nbns-list name

Specifies the NBNS list for CIFS as defined in the context

 

 

configuration.

 

 

Supported only with Windows 2000 servers and Linux/UNIX.

 

 

Note This command applies only to clientless mode.

 

 

 

 

no

Negates a command or set its defaults.

 

 

 

 

port-forward name

Specifies the port-forward list as defined in the context

No list specified, and port

 

configuration. Entering the command again overrides the previous

forwarding is disabled.

 

setting. The default is to have no list specified,

 

 

Note This command applies only to thin-client mode.

 

 

 

 

timeout {idle

Specifies the end-user idle timeout value and maximum session

idle seconds—2100

session} seconds

timeout value for the user or group.

seconds (35 minutes)

 

idle seconds—Specifies the end-user inactivity. Valid values for

session seconds—43200

 

idle timeout are from 0 (disabled) to 3600 seconds.

seconds (12 hours)

 

session seconds—Specifies the total session time, regardless of

 

 

activity. Valid values for session timeout are from 1 to 1209600

 

 

seconds.

 

 

 

 

svc

Specifies the tunnel configuration; see the svc command for

 

 

additional information.

 

 

 

 

url-list name

Specifies the URL list as defined in the context configuration.

No list is specified.

 

Entering the command again overrides the previous setting.

 

 

Note This command applies only to clientless mode.

 

 

 

 

Catalyst 6500 Series Switch WebVPN Module Command Reference—Release 1.1

 

OL-7310-01

2-39

 

 

 

Image 39
Contents Commands for the Catalyst 6500 Series Switch WebVPN Module Release Modification DefaultsCommand Modes Command History Clear webvpn nbnsClear webvpn platform Webvpn# clear webvpn platform Specifies the user name Clear webvpn sessionClears the statistics for a specific context User namePort-forward Clear webvpn statsCifs Mangle3des Crypto key export rsa pemTerminal Url urlKey nametest-keys UsageGeneral Purpose Key Exportable Crypto key generateGeneral-keys Usage-keysThis example shows how to generate special-usage RSA keys This example shows how to generate general-purpose RSA keysCrypto key generate rsa usage-keys Release Modification Crypto key import rsa pemPEM-formatted RSA key to the WebVPN Services Module Crypto pki authenticate trustpoint-label Crypto pki authenticateCrypto pki certificate Defaults Command Modes Command History Usage GuidelinesWwbvpnconfig# crypto pki crl request Crypto pki crl requestCrypto pki crl request name Crypto pki enroll trustpoint-label This example shows how to request a certificateWebvpnconfig# crypto pki enroll PROXY1 Crypto pki enrollCrypto pki export pem Related Commands crypto pki import pem Crypto pki export pkcs12 PKCS12 file This example shows how to export a PKCS12 file using SCPWwbvpnconfig# crypto ca export TP1 pkcs12 scp sky is blue Include the full path in the pkcs12filename valueCrypto pki import pem Usage Guidelines Examples Related Commands crypto pki export pemCrypto pki import pkcs12 Users/admin-1/pkcs12/TP2.p12 This example shows how to import a PKCS12 file using SCPWebvpnconfig# crypto pki profile enrollment test Crypto pki profile enrollmentCrypto pki profile enrollment label Crypto pki trustpoint Command Purpose and Guidelines Defaults Count count-10 Enrollment http-proxymode ra retryPeriod minutes-1 Period minutes count count url urlSkip Certificate map mapname commandPassword password Match certificate mapname map overrideSubject-name line Usage ike ssl-client ssl-serverVrf vrf Debug webvpn Trace module module- FDU trace Event app next-hop tcp-Event debuggingCa-pool- CA Pool Cert- Certificate managementEvents- Events This example shows how to turn on tunnel debugging Usage Guidelines Nbns-list name no nbns-list name Nbns-listMaster timeout Nbns-server ipaddrExit Policy group Banner value stringFilter tunnel ip-acl Nbns-list name Functions file-accessTimeout idle Hide-url-barWebvpnconfig-webvpn-group#svc address-pool ciscotunlpool Webvpnconfig# webvpn context ciscoPort-forward listname no port-forward listname Default local-portSpecifies the default local port valid values are from 1 to Port-forwardWebvpn context Related Commands url-listShow webvpn context Show webvpn context nameWebvpn# show web context tunnel Member Show webvpn dispatchShow webvpn dispatch algorithm member stats AlgorithmSslvpn CLB Member Table Webvpn# show webvpn gateway Webvpn# show webvpn gateway s1 Admin Status upShow webvpn gateway Show webvpn gateway nameStatus Show webvpn installFile CsdWebvpn# show web install file \webvpn\stc\version.txt Show web nbns context all Show webvpn nbnsShow webvpn nbns context name all AllShow webvpn platform buffers Show webvpn-platform buffers module moduleShow webvpn-platform buffers module all Show webvpn platform context Show webvpn platform context name module moduleWebvpn# show webvpn platform context tunnel OL-7310-01 Details Show webvpn platform crash-infoShow webvpn platform crash-info brief details BriefNvram Version This Core Didnt Crash Module module Show webvpn platform gatewayShow webvpn platform gateway name debug module module DebugVlan ID Module This command has no default settingsShow webvpn platform mac address Show webvpn platform mac addressTcp Show webvpn platform policyShow webvpn platform policy ssl tcp name SslShow webvpn platform version Show webvpn platform versionWebvpn# show webvpn platform version Show webvpn platform vlan Show webvpn platform vlan vlan-idWebvpn# show webvpn platform vlan Context name Tcp Related Commands webvpn policy sslShow webvpn policy Group nameWebvpn# show webvpn session context c1 Show webvpn sessionContext name User nameShow webvpn stats Show webvpn stats typeWebvpn# show webvpn stats Mangling statistics Relative urls 15705 Absolute urls 41850 DPD Page TCP VCs Active VCs Aborted Conns Webvpn# show web stats context tunnel DPD Snmp-server enable This example shows how to enable Snmp informs This example shows how to enable trapsThis example shows how to enable authentication traps Dns-server primary secondary Command Modes WebVPN group context submodeCommand History Release Modification SvcCommand Purpose and Guidelines Default No rekey time Rekey method new-tunnel sslNo rekey method Rekey time intervalUrl-text text url-value url/exchage Url-listUrl-list listname no url-list listname Heading textRelated Commands webvpn context Webvpn context Aaa authentication domain domain-listSpecifies AAA configuration parameters for context Default-group-policy default-policy-namePassword-prompt prompt InserviceLogin-message string No login-messagePolicy ssl policy-name Ssl authenticate verify all noneAuthenticate verify -Specifies the SSL Policy group policy-nameUrl-list listname Vrf-name vrf-nameColor Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Color Name Webvpnconfig-webvpn-context# url-list cisco 100 Webvpn gateway Secondary No policy tcpNo policy ssl Webvpnconfig# webvpn gateway common Webvpnconfig-webvpn-gateway#ip address 172.21.65.71 portContext and enter the gateway submode Webvpn policy ssl Help No session-cache enableTimeout handshake timeout Timeout session timeout absoluteWwbvpnconfig-ssl-policy#cipher RSAWITH3DESEDECBCSHA This example shows how to enable session-cacheThis example shows how to disable session-cache Wwbvpnconfig# webvpn policy ssl sslpl1This example shows how to print out a help Related Commands show webvpn statsWwbvpnconfig-ssl-policy#timeout session 30000 absolute Webvpn policy tcp Timeout syn is 75 secondsTimeout reassembly is 60 seconds Tos carryover is disabled Default ExitNo timeout inactivity timeout-in-seconds Delayed-ack-thresholdDelay-ack-timeout No timeout fin-wait timeout-in-secondsServer to client connection, the server connection must be No timeout reassembly timeForm of this command to return to the default setting No tos carryover111 112
Related manuals
Manual 20 pages 62.17 Kb Manual 160 pages 24.26 Kb Manual 262 pages 31.67 Kb