vpn服務端配置
配置過程:
[root@sv ~]# pacman -Syu #更新系統[root@sv ~]# pacman -S pptpd #安裝pptpd服務[root@sv ~]# cat /etc/pptpd.conf #cp /usr/share/doc/pptpd/samples/pptpd.conf /etc/pptpd.confoption /etc/ppp/options.pptpdstimeout 2debuglocalip 172.28.1.1 #本地IPremoteip 172.28.1.240-254##################################################[root@sv ~]# cat /etc/ppp/options.pptpd #cp /usr/share/doc/pptpd/samples/options.pptpd /etc/options.pptpdname pptpdrefuse-paprefuse-chaprefuse-mschaprequire-mschap-v2require-mppe-128ms-dns 8.8.8.8ms-dns 8.8.4.4proxyarpnodefaultroutelockauth##################################################[root@sv ~]# cat /etc/ppp/chap-secrets # Secrets for authentication using CHAP# client server secret IP addressest4x pptpd admin * ##################################################[root@sv ~]# sysctl -w net.ipv4.ip_forward=1 #設定核心支援轉寄[root@sv ~]# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE #支援NAT[root@sv ~]# iptables -t nat -A POSTROUTING -s 172.28.1.0/24 -o eth1 -jMASQUERADE[root@sv ~]# systemctl start pptpd
vpn用戶端配置
用戶端:
[root@hz ~]# yum install pptp pptp-setup[root@hz ~]# pptpsetup --create vpn --server x.x.x.x --username byrd --password xxxxxx --encrypt --startUsing interface ppp0 Connect: ppp0 <--> /dev/pts/1CHAP authentication succeededMPPE 128-bit stateless compression enabledlocal IP address 192.168.0.234remote IP address 192.168.0.1[root@hz ~]# pptpsetup --delete vpn[root@hz ~]# ll /etc/ppp/peers/ total 8-rw-r--r-- 1 root root 149 Apr 28 10:37 vpn[root@hz ~]# ifconfig ppp0 Link encap:Point-to-Point Protocol inet addr:192.168.0.234 P-t-P:192.168.0.1 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1496 Metric:1 RX packets:6 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:60 (60.0 b) TX bytes:66 (66.0 b)[root@hz ~]# pppd call vpn #撥號vpn[root@hz ~]# killall pppd