VPN on 我的乐与怒 /tags/vpn/ Recent content in VPN on 我的乐与怒 Hugo -- gohugo.io zh-cn Thu, 04 Aug 2016 09:49:00 +0000 CentOS搭建L2TP VPN服务 /post/2016-08-04-l2tp-vpn-setup/ Thu, 04 Aug 2016 09:49:00 +0000 /post/2016-08-04-l2tp-vpn-setup/ 参考 : http://longtimenoc.com/archives/centos%E4%B8%8Al2tp%E5%AE%89%E8%A3%85%E4%B8%8E%E9%85%8D%E7%BD%AE 准备 编译会用到的库 yum install -y ppp iptables make gcc gmp-devel xmlto bison flex xmlto libpcap-devel lsof vim-enhanced 安装openswan wget https://download.openswan.org/openswan/openswan-latest.tar.gz tar zxf openswan-latest.tar.gz cd openswan-2.6.48 make programs install 安装xl2tpd yum install xl2tpd 配置 配置/etc/ipsec.conf config setup nat_traversal=yes virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12 oe=off protostack=netkey conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT conn L2TP-PSK-noNAT authby=secret pfs=no auto=add keyingtries=3 rekey=no ikelifetime=8h keylife=1h type=transport left=$vpsip #改你服务器的IP leftprotoport=17/1701 right=%any rightprotoport=17/%any 配置 /etc/ipsec.secrets 你的服务器IP %any: PSK "你的密码" 编辑 /etc/sysctl.conf PPTP MAC断线问题 /post/2016-08-01-pptp-issue-of-mac/ Mon, 01 Aug 2016 14:45:00 +0000 /post/2016-08-01-pptp-issue-of-mac/ MAC连接pptp服务经常断线 日志内容如下 Aug 1 14:01:06 s1 pptpd[21666]: CTRL: Client 218.88.x.155 control connection finished Aug 1 14:05:34 s1 pptpd[21965]: CTRL: Client 218.88.x.155 control connection started Aug 1 14:05:34 s1 pptpd[21965]: CTRL: Starting call (launching pppd, opening GRE) Aug 1 14:05:34 s1 pppd[21967]: Warning: can't open options file /home/xxxx/.ppprc: Permission denied Aug 1 14:05:34 s1 pppd[21967]: Plugin /usr/lib64/pptpd/pptpd-logwtmp.so loaded. Aug 1 14:05:34 s1 pppd[21967]: pptpd-logwtmp: $Version$ Aug 1 14:05:34 s1 pppd[21967]: Using interface ppp0 Aug 1 14:05:34 s1 pppd[21967]: Connect: ppp0 <--> /dev/pts/2 Aug 1 14:05:34 s1 pptpd[21965]: GRE: Bad checksum from pppd. Aug 1 14:05:38 s1 pppd[21967]: MPPE 128-bit stateless compression enabled Aug 1 14:05:41 s1 pppd[21967]: Unsupported protocol 'Apple Client Server Protocol Control' (0x8235) received Aug 1 14:05:41 s1 pppd[21967]: Unsupported