Step by step L2TPns

Step by step, complete L2TPns-Linux Enterprise Application-Linux server application information. The following is a detailed description. Original: Yi Tian Qiu Shui
Recently, the company wants to host a LINUX-based VPN Server, requiring L2TPns. I searched the internet and found little information about the configuration. After finding a large number of E-files, I finally got it done. In order to avoid detours like me, close up this article. The text is not good. Please do not laugh.
(The LINUX server in this article is Ubuntu 7.10. Although I have always been a loyal FANS of Red Hat, I am helpless because the company is currently using Ubuntu .)

Article 1
Let's solve L2TPns in the simplest way.
Server 192.168.1.118 (simulated by VMware), client 192.168.1.108 (XP)
Step 1: Install Freeradius.
L2TPns does not provide User Name authentication. Therefore, we must first install Freeradius.
It is convenient to install software under Ubuntu as follows:
Apt-get install freeradius
Use freeradius directly without changing any parameters. The configuration of freeradius is the second article.
Step 2: Install l2tpns.
Apt-get install l2tpns
After installation, you can configure it according to the actual situation. L2TPns has three configuration files: ip_pool, startup-config, and users.
The content of the ip_pool file represents the IP address range obtained after the client is connected. The modified content is as follows: 192.168.10.0/24.
The users file represents the Administrator's username and password. You can write the username and password as admin.
The focus is on the startup-config configuration file. Use VIM to edit it. The additional content is deleted, leaving only the following content:
Set debug 3 # log record level
Set log_file "/var/log/l2tpns" # log File Location
Set pid_file "/var/run/l2tpns. pid"
Set l2tp_secret "secret"
Set primary_dns 192.168.1.1 # primary DNS
Set primary_radius 127.0.0.1 # freeradius Server location
Set primary_radius_port 1812 # freeradius server port
Set radius_secret "testing123" # default password of freeradius Server

Set accounting_dir "/var/run/l2tpns/acct"

OK. This is the case on the server side.

Step 3: test.

(The steps for creating a VPN connection under XP and modifying the Registry are not described in this article, So I skipped it .)

Create a connection, open the Properties dialog box during connection, switch to the "Security" tab, select "advanced" -- settings -- data encryption, and select "Encryption not allowed (......) "-- allow these protocols to only check" Unencrypted Password (PAP) ". OK.
Then enter the user name and password in LINUX respectively (the root user can also ). Is the connection successful? Hey, it's that simple!
Of course, the above is only a preliminary configuration and can only be used for testing. For more in-depth configuration, read the second article. (To be continued)