[原创]linuxredhat9:pptpdvpn服务器的配置及说明

leo

linux red hat 9 : pptpd vpn服务器的配置及说明

公司需要配置一个vpn的服务器，我选择了pptp这个协议，相关的软件如下：

1、kernelmod-0.7.1.tar.gz      #MPPE的kernel补丁

2、ppp-2.4.2-b3.i386.rpm     #升级PPP

3、pptpd-1.1.4-b4.i386.rpm    #pptpd的软件

环境:

OS:red hat 9

在安装系统之后首先安装或升级PPP:

#rpm -qa|grep ppp                #查询PPP有没有安装

#rpm -ivh pptpd-1.1.4-b4.i386.rpm       #安装PPP

#rpm -Uvh pptpd-1.1.4-b4.i386.rpm      #升级PPP



相关配置：

/etc/pptpd.conf  pptpd的配置文件

/etc/ppp/options.pptpd   这是选项文件，我把它叫做控制文件

/etc/ppp/chap-secrtes  这是开帐户用的文件

实例：
          /etc/pptpd.conf:

################################################################################

#

# Sample PoPToP configuration file

#

# for PoPToP version 1.1.4-b3

#

################################################################################



# TAG: speed

#

# Specifies the speed for the PPP daemon to talk at.

#

#speed 115200



# TAG: option

#

# Specifies the location of the PPP options file.

# By default PPP looks in '/etc/ppp/options'

#

option /etc/ppp/options.pptpd



# TAG: stimeout

#

# Specifies timeout (in seconds) on starting ctrl connection

#

# stimeout 10



# TAG: debug

#

# Turns on (more) debugging to syslog

#

debug



# TAG: bcrelay <if>

#

# Turns on broadcast relay to clients from interface <if>

#

#bcrelay eth0

listen 11.1.1.97



# TAG: localip

# TAG: remoteip

#

# Specifies the local and remote IP address ranges.

#

# You can specify single IP addresses seperated by commas or you can

# specify ranges, or both. For example:

#

# 192.168.0.234,192.168.0.245-249,192.168.0.254

#

# IMPORTANT RESTRICTIONS:

#

# 1. No spaces are permitted between commas or within addresses.

#

# 2. If you give more IP addresses than MAX_CONNECTIONS, it will

#  start at the beginning of the list and go until it gets

#  MAX_CONNECTIONS IPs. Others will be ignored.

#

# 3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238,

#  you must type 234-238 if you mean this.

#

# 4. If you give a single localIP, that's ok - all local IPs will

#  be set to the given one. You MUST still give at least one remote

#  IP for each simultaneous client.

#

localip 192.168.10.1

remoteip 192.168.10.100-240

netmast 255.255.255.0

# or

#localip 192.168.0.234-238,192.168.0.245

#remoteip 192.168.1.234-238,192.168.1.245



########################################################################################


                      /etc/options.pptpd

## CHANGE TO SUIT YOUR SYSTEM

lock



## turn pppd syslog debugging on

debug

dump

logfd 2

logfile /var/log/pptpd.log



## change 'pptpd' to whatever you specify as your server name in chap-secrets

name pptpd

mtu 1450

mru 1450

proxyarp

auth

#bsdcomp 0



# This option applies if you use ppp with chapms-strip-domain patch

#chapms-strip-domain

nobsdcomp

# These options apply if you use ppp with mppe patch

# NB! You should also apply the ChapMS-V2 patch

#+chap

#-chapms

#+chapms-v2

ipcp-accept-local

ipcp-accept-remote

lcp-echo-failure 3

lcp-echo-interval 5

#mppe-128

#mppe-stateless

refuse-pap

refuse-chap

refuse-mschap

refuse-eap

require-mschap-v2

# These options will tell ppp to pass on these to your clients

# To use ms-wins or ms-dns in options.pptpd it must exist in /etc/resolv.conf

multilink

require-mppe

#ms-wins your.server.here

#ms-dns 61.134.1.9



########################################################################################


                  /etc/ppp/chap-secrets

# Secrets for authentication using CHAP

# client      server         secret          IP addresses

####### redhat-config-network will overwrite this part!!! (begin) ##########

####### redhat-config-network will overwrite this part!!! (end) ############

user1       pptpd         password1           *

user2       pptpd         password2           *



查看内核是否支持Mppe :

#strings ' /usr/sbin/pppd' |grep -i mppe|wc --lines

大于30则支持mppe

加入模块



#modprobe ppp_mppe

出现一些提示说明成功加载



启动pptpd:

service pptpd start



本文出自

www.linuxstudy.cn

我的文章转过来！

网路游侠

[emb6]