赞
踩
- cat > /etc/ipsec.conf <<EOF
- # ipsec.conf - strongSwan IPsec configuration file
-
- # basic configuration
-
- config setup
- # strictcrlpolicy=yes
- # uniqueids = no
-
- # Add connections here.
-
- # Sample VPN connections
-
- conn %default
- ikelifetime=60m
- keylife=20m
- rekeymargin=3m
- keyingtries=1
- keyexchange=ikev1
- authby=secret
- ike=aes128-sha1-modp1024,3des-sha1-modp1024!
- esp=aes128-sha1-modp1024,3des-sha1-modp1024!
-
- conn myvpn
- keyexchange=ikev1
- left=%defaultroute
- auto=add
- authby=secret
- type=transport
- leftprotoport=17/1701
- rightprotoport=17/1701
- right=47.100.171.251
- EOF
-
-
- cat > /etc/ipsec.secrets <<EOF
- : PSK "xindoo.me"
- EOF
-
- cat > /etc/xl2tpd/xl2tpd.conf <<EOF
- [lac myvpn]
- lns = 47.100.171.251
- ppp debug = yes
- pppoptfile = /etc/ppp/options.l2tpd.client
- length bit = yes
- EOF
-
- cat > /etc/ppp/options.l2tpd.client <<EOF
- ipcp-accept-local
- ipcp-accept-remote
- refuse-eap
- require-chap
- noccp
- noauth
- mtu 1280
- mru 1280
- noipdefault
- defaultroute
- usepeerdns
- connect-delay 5000
- name Test1
- password test1
- EOF
-
- chmod 600 /etc/ppp/options.l2tpd.client
-
- ipsec restart
- ipsec up myvpn
配置l2tp服务器:
https://blog.csdn.net/xindoo/article/details/52830609
配置l2tp客户端:
https://blog.csdn.net/rainforest_c/article/details/71171237
https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-zh.md#linux
Copyright © 2003-2013 www.wpsshop.cn 版权所有,并保留所有权利。