How to install L2TP/Ipsec VPN in CentOS

After countless attempts over the past six months, we have tested many methods for installing the software on the internet. The following is a record of successful methods.

One-click L2TP installation package
The one-click installation package of Zed Lau is http://www.vpseek.com/automated-l2tp-over-ipsec-implement-script. it is especially easy to use this installation package.

Installation environment: Linode Centos 5.6 32bit, Linode CentOS 6.2 64bit
Installation steps:

Wget http://mirror.vpseek.com/auto-l2tp/1.2/centos/l2tp.sh
Sh l2tp. sh

Prompt to enter ip range (Linode does not have Private IP by default, you need to Add it in the background, Dashboard-> Remote Access-> Add Private IPs)

Enter PSK (PSK is the key used by the l2tp client. It is required. It is used in IOS and Android settings)

 

As shown in the figure, the installation process is completed. Pay special attention to the output results in the red box.

The default user name is test and the password is test123.
Modification method:

Vi/etc/ppp/chap-secrets
Content format:

# User server password ip
Username l2tpd userpass *
(Note: The asterisk * is used by default on the ip side. New users may be crazy about vi usage, but it is good to practice more .)

The server installation is complete.

Next we will set up a mobile phone connection VPN, taking ios as an example.
 

The above one-click L2TP installation package was also compiled based on openswan + xl2ptd source code. I initially built a VPN based on gkp. At that time, I used 64-bit Centos 6.2, which had never been successful. Now that the space has been relocated, I simply re-installed the Linode system with a 32-bit Centos 5.6 for the experiment.

Install based on ipsec-tools

Some people say that using openswan as an environment to install l2tp vpn may cause problems during Android connection. (As Openswan is reported having issues with Android ICS (byte 7 of ISAKMP NAT-OA Payload must be zero ))

Http://wiki.nikoforge.org/L2TP/IPSec_VPN_Setup_on_Centos_6_ (64-bit) _ for_use_with_Android_ICS_and_iOS_5_Clients

Therefore, the setup process is better than openswan + xl2ptd. IOS can successfully connect to the VPN, but cannot access the Internet. I suspected it was a problem with the IP settings of the Linode Lan. However, after the above method test, I denied this idea.

Now that DigitalOcean's VPS is used and the website is moved over, Linode can leave it empty and try it out. Let's see how fast my blog is accessed?

Remarks

Creating an l2tp/ipsec experiment is still in progress...