In this paper, the system is Centos6.0, the VPN service takes PPTPD as an example, and the bottom involves pptpd+freeradius+mysql authentication.
Related url:http://lansgg.blog.51cto.com/5675165/1225461
This paper is a real case; leader demand is mostly like this, save the cost also to achieve the desired effect; no way, the total to do a result;
Demand, a domestic VPN machine (SERVER1), multiple IP, such as: 10.10.10.1-5 (5 IP), a foreign VPN machine (SERVER2), multiple IP, such as: 20.20.20.1-5 (5 IP); IP tunnel jump between two VPN servers ; For example, you want to use foreign IP, you only need to dial into the domestic VPN server, we have done the IP tunnel. The external IP is already abroad, and the delay is less than the delay of the VPN that you connect directly to the foreign country. Look at the picture first;
Each color represents a different link direction, as shown in the picture; one of the red on behalf of the Jump link, dial into the domestic IP, is actually foreign IP; Black represents the domestic user direct even Server1, the use of domestic IP, the blue representative of the user directly connected to foreign machines, direct use of foreign IP, why use the tunnel? , because some users directly attached to the foreign server, the delay is large, the tunnel, you can reduce the delay;
I think we should understand it, leader means that domestic machines both internal services, not only to jump outside, foreign machines both to do the node to jump, but also to do direct-attached server. Specific trend, is now based on dial-in IP to achieve control, dial into the IP tunnel docking IP to jump past, other do not realize jump, reduce costs AH
Start the deployment step below;
1, the deployment of two machines PPTPD service, five IP listening to each IP, that is, five processes; The following is the configuration file;
cat/etc/pptpd.conf
ppp/usr/sbin/pppd
option/etc/ppp/pptpd-options
logwtmp
Connections
1024 Listen 10.10.10.1
localip 172.16.0.1
remoteip 172.16.0.2-254
cat/etc/pptpd2.conf
ppp/usr/sbin/ PPPD
option/etc/ppp/pptpd-options
logwtmp
connections 1024
listen 10.10.10.2
localip 172.16.1.1
remoteip 172.16.1.2-254
cat/etc/pptpd3.conf
ppp/usr/sbin/pppd
option/etc/ppp/ Pptpd-options
logwtmp
connections 1024
Listen 10.10.10.3
localip 172.16.2.1
Remoteip 172.16.2.2-254
cat/etc/pptpd4.conf
ppp/usr/sbin/pppd
option/etc/ppp/pptpd-options
logwtmp
connections 1024
Listen 10.10.10.4
localip 172.16.3.1
remoteip 172.16.3.2-254
cat/etc/ pptpd5.conf
ppp/usr/sbin/pppd
option/etc/ppp/pptpd-options
logwtmp
Connections
1024 Listen 10.10.10.5
localip 172.16.4.1
remoteip 172.16.4.2-254