在本实验中，为了使路由器支持ssl ***需要上传并安装SSL-×××-Client到路由器。由此为前提来模拟ssl ***的安全技术。ssl ***配置下节实验做介绍。

 

在上传安装ssl-***-client之前，先搭建tftp服务器，本次试验用的是cisco tftp server 1.1。测试路由器和tftp server的连通性

R1#ping 192.168.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/17/36 ms
R1#

路由器和tftp服务器成功通信，下面我来上传ssl-***-client

  • 释放disk0空间用作存储上传文件
    R1#format disk0:
    Format operation may take a while. Continue? [confirm]
    Format operation will destroy all data in "disk0:".  Continue? [confirm]
    Format: Drive communication & 1st Sector Write OK...
    Writing Monlib sectors.
    .....................................................................................................................................................
    Monlib write complete

          Format: All system sectors written. OK...

          Format: Total sectors in formatted partition: 130883
          Format: Total bytes in formatted partition: 67012096
          Format: Operation completed successfully.

          Format of disk0 comple

  • 上传ssl-***-client

      R1#copy tftp: disk0:
     Address or name of remote host []? 192.168.1.2
     Source filename []? sslclient.pkg
     Destination filename [sslclient.pkg]?
    Accessing tftp://192.168.1.2/sslclient.pkg...
    Loading sslclient.pkg from 192.168.1.2 (via FastEthernet1/0): !!!!!!!!!
    [OK - 2208871 bytes]

    2208871 bytes copied in 56.880 secs (38834 bytes/sec)

  • 安装ssl-***-client

     R1#conf t
     Enter configuration commands, one per line.  End with CNTL/Z.
     R1(config)#web*** install svc disk0:/sslclient.pkg
     SSL××× Package SSL-×××-Client : installed successfully

     R1(config)#

成功上传并安装了ssl-***-client，这台路由器支持ssl ***了。