/tags/l2tp/ Recent content in L2TP on 我的乐与怒 Hugo -- gohugo.io zh-cn Thu, 04 Aug 2016 09:49:00 +0000 /post/2016-08-04-l2tp-vpn-setup/ Thu, 04 Aug 2016 09:49:00 +0000 /post/2016-08-04-l2tp-vpn-setup/ 参考 : http://longtimenoc.com/archives/centos%E4%B8%8Al2tp%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE 准备 编译会用到的库 yum install -y ppp iptables make gcc gmp-devel xmlto bison flex xmlto libpcap-devel lsof vim-enhanced 安装openswan wget https://download.openswan.org/openswan/openswan-latest.tar.gz tar zxf openswan-latest.tar.gz cd openswan-2.6.48 make programs install 安装xl2tpd yum install xl2tpd 配置 配置/etc/ipsec.conf config setup nat_traversal=yes virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12 oe=off protostack=netkey conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT conn L2TP-PSK-noNAT authby=secret pfs=no auto=add keyingtries=3 rekey=no ikelifetime=8h keylife=1h type=transport left=$vpsip #改你服务器的IP leftprotoport=17/1701 right=%any rightprotoport=17/%any 配置 /etc/ipsec.secrets 你的服务器IP %any: PSK "你的密码" 编辑 /etc/sysctl.conf