Create a VPN server on suse10

Article title: Create a VPN server on suse10. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

The VPN is a virtual private network. the private network can be understood as an enterprise Intranet or a LAN. why is the word "virtual" added? It refers to the establishment of a VPN through the public network, that is, through the public network to establish one or more private network links, so as to connect offices or individuals in different regions to the enterprise network. If you are interested, you can go to the Internet to G. now many enterprises rely on VPN for meals. VPN is simple, secure, and efficient, so more and more people are using it. there are many VPN types, two or three-tier VPNs are commonly used, such as L2TP/PPTP, IPSec, and GRE. in this experiment, a pptp vpn is used.

1. packages to be installed

Ppp *. rpm pptp *. rpm pptpd *. rpm (you can use rpm-qa to check whether the tool is installed before installation)

2. files to be followed

Etc/ppp etc/pptpd/etc/pptpd. conf (the first two are directories)

3. files to be configured

/Etc/pptpd. conf

Localip 192.168.1.88 # VPN server address, which can be a virtual address

Remoteip 192.168.2.100-200 # IP address assigned to the VPN client

/Etc/ppp/chap-secret

User01 * i314 * # User name user01, host name *, password i314, IP address assigned to the change user, "*" indicates any

4. start the daemon process

Pptpd

5. precautions for VPN client configuration on windows

1. select advanced on the Security tab --> settings, and select "optional encryption (no encryption or connection is allowed)" for data encryption to enable all protocols to be hooked up.

2. select pptp vpn as the VPN type on the network tab.

3. Network tab TCP/IP properties --> advanced --> General, remove the check box before "use default gateway on remote network". Otherwise, the network cannot be accessed.

This article is from 51CTO. COM Technical Blog