Set up L2TPIPSecVPN server (X509) in Linux)

Article Title: Set up L2TPIPSecVPN server (X509) in Linux ). Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

1 Description
Required software and
CentOS 1, 5.2----------------------------------------------------- The most stable linux Server
Ppp-2.4.3.tar.gz--------------------------------------------- PPP main program
Openssl-0.9.8i.tar.gz----------------------------------------- Main program for certificate Production
Xl2tpd-1.2.3.tar.gz-------------------------------------------- FreeRadius Server master program
Openswan-2.6.19.tar.gz------------------------------------- IPSec Main Program

1.2 implementation process and features

Shows the topology of our test network:

500) this. width = 500; "border = 0 twffan =" done ">

We used the vmvm test. The network settings in the VM are as follows:

On the "Host Virtual Network Mapping" tab in the Virtual Network Editor provided by VMware, set VMNet2 to Not bridged, click the ">" button on the right-subnet, enter the IP address 172.16.1.0, and click OK.

The VPNGateway virtual machine needs to add another nic. in Linux, set each Nic according to the following table, and select the network corresponding to the NIC in the VM settings. The network card 0 of VPNGateway belongs to VMNet0, and the Network Card 1 belongs to vmnet2. The default Nic of network adapter 1 is 192.168.2.1.

In addition, the XP host is automatically located in VMNet0 and does not need to be set.

Machine name	Nic0 (eth0)	Nic1 (eth1)	Default Gateway	Network	Role description
Windows	192.168.1.55		192.168.1.20.	VMNet0	XP Client
VPNGateway	192.168.1.20.	172.16.1.100	192.168.1.20.	VMNet0, VMNet2	VPNGateway
Juniper	172.16.1.101		172.16.1.100	VMNet2	Private NetworkHTTPServer

The CIDR Block 192.168.1.0/24 simulates the internet, and windows xp simulates the VPN Client for Internet dialing.

The network segment 172.16.1.0/24 simulates the Intranet. Juniper is a machine in the intranet and serves as an internal HTTP server.

[1] [2] [3] Next page