在本實驗中,爲了使路由器支持ssl ***須要上傳並安裝SSL-×××-Client到路由器。由此爲前提來模擬ssl ***的安全技術。ssl ***配置下節實驗作介紹。web
在上傳安裝ssl-***-client以前,先搭建tftp服務器,本次試驗用的是cisco tftp server 1.1。測試路由器和tftp server的連通性安全
R1#ping 192.168.1.2服務器
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/17/36 ms
R1#ide
路由器和tftp服務器成功通訊,下面我來上傳ssl-***-client測試
釋放disk0空間用做存儲上傳文件
R1#format disk0:
Format operation may take a while. Continue? [confirm]
Format operation will destroy all data in "disk0:". Continue? [confirm]
Format: Drive communication & 1st Sector Write OK...
Writing Monlib sectors.
.....................................................................................................................................................
Monlib write completeorm
Format: All system sectors written. OK...server
Format: Total sectors in formatted partition: 130883
Format: Total bytes in formatted partition: 67012096
Format: Operation completed successfully.ip
Format of disk0 complessl
上傳ssl-***-clientci
R1#copy tftp: disk0:
Address or name of remote host []? 192.168.1.2
Source filename []? sslclient.pkg
Destination filename [sslclient.pkg]?
Accessing tftp://192.168.1.2/sslclient.pkg...
Loading sslclient.pkg from 192.168.1.2 (via FastEthernet1/0): !!!!!!!!!
[OK - 2208871 bytes]
2208871 bytes copied in 56.880 secs (38834 bytes/sec)
安裝ssl-***-client
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#web*** install svc disk0:/sslclient.pkg
SSL××× Package SSL-×××-Client : installed successfully
R1(config)#
成功上傳並安裝了ssl-***-client,這臺路由器支持ssl ***了。