红联Linux门户
Linux帮助

RH Linux 9下面的VPN Server架设指南

发布时间:2006-10-30 01:03:30来源:红联作者:tongxiaokun
  Server: Red Hat Linux 9 Kernel 2.6.10

  Client: Win2000 Pro/Server SP4,WinXP SP2

  Server所需要:

  www.kernel.org
  kernel: linux-2.6.10.tar.bz2

  http://www.polbox.com/h/hs001/
  kernel_patch: linux-2.6.10-mppe-mppc-1.2.patch.gz
  pppd: ppp-2.4.3.tar.gz
  pppd_patch: ppp-2.4.3-mppe-mppc-1.1.patch.gz
  pptpd: pptpd-1.2.3.tar.gz

  为了方便起见,可以把它们放在同一个目录下

  我不喜欢用RPM方式安装,所以都是用的源码方式编译安装
一、先给内核打补丁

# tar zjvf linux-2.6.10.tar.bz2
# gunzip linux-2.6.10-mppe-mppc-1.2.patch.gz
# patch -p0 -i linux-2.6.10-mppe-mppc-1.2.patch
# ln -s linux-2.6.10 linux
# cd linux
# make menuconfig
Device Drivers -> Networking Support->


  把 "PPP support" 编进内核,你也可作为模块编译。

PPP Support for async serial ports
PPP Support for sync tty ports
PPP Deflate compression
Microsoft PPP compression/encryption (MPPC/MPPE)"
Cryptographic options


  把 "Cryptographic API" 编进内核,你也可作为模块编译。确保SHA1 和 ARC4 支持已经选上:

SHA1 digest algorithm
ARC4 cipher algorithm


  保存配置文件,退出

  编译内核

  make all modules modules_install install

  修改/etc/modprobe.conf (2.4的Kernel请修改/etc/modules.conf)

  重启,进入2.6.10

二、安装PPP

  安装之前先用 rpm -qa |grep ppp 看一下是否系统有安装RH9自带的ppp-2.4.1-10

  如果有的话, 用 rpm -e 卸载先,可能还有依赖关系,依次卸载,如:

#rpm -e rp-pppoe-3.5-2
#rpm -e wvdial-1.53-9
#rpm -e ppp-2.4.1-10

# tar xzvf ppp-2.4.3.tar.gz
# gunzip ppp-2.4.3-mppe-mppc-1.1.patch
# patch -p0 -i ppp-2.4.3-mppe-mppc-1.1.patch
# cd ppp-2.4.3
# ./configure
# make; make install


  三、安装 pptpd


#tar xzvf pptpd-1.2.3.tar.gz
# ./configure
# make; make install


  相关的配置文件:

/etc/pptpd.conf
# pptpd的基本配置文件
/etc/ppp/options.pptpd
# VPN拨号选项
/etc/ppp/chap-secrets
# 用户名和密码信息
/etc/modules.conf
# 模块加载信息
(2.4的Kernel请修改/etc/modules.conf)

vi /etc/pptpd.confppp /usr/local/sbin/pppd
#指定pppd的路径
option /etc/ppp/options.pptpd
# 指定option 文件位置
localip 192.168.1.3
#同服务器的LAN地址
remoteip 192.168.1.230-239
#分配?客户端的ip


  本例范围从192.168.1.230到192.168.1.239。您也可以单独指定某个地址或者多段地址,用逗号隔开,如在192.168.1.230-239,192.168.1.254

vi /etc/ppp/options.pptpd

name *
lock
mtu 1450
mru 1450
proxyarp
auth
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
deflate 0
# Handshake Auth Method
- 加密协议类型
+chap
+mschap-v2
# Data Encryption Methods
mppe required,stateless
其它详细说明请参见 man pppd
或者 man pptpd

vi /etc/ppp/chap-secrets
#client server Password IP Address
test * 12345 *


因为密码是明文显示的,最好能修改文件权限,使root作为owner和chmod 700

vi /etc/modules.conf
alias char-major-108 ppp_generic
alias /dev/ppp ppp_generic
alias tty-ldisc-3 ppp_async
alias tty-ldisc-14 ppp_synctty
alias ppp-compress-18 ppp_mppe_mppc
alias ppp-compress-21 bsd_comp
alias ppp-compress-24 ppp_deflate
alias ppp-compress-26 ppp_deflate


  重新启动

# reboot


  在我这里 alias ppp-compress-18 ppp_mppe_mppc 好像没用,只好手动加载:

# modprobe ppp_mppe_mppc


  确认内核支持

strings `which pppd`|grep -i mppe|wc --lines
30
###大于等于30就行#####
[strings `which pppd`|grep -i mppc|wc --lines
7
#### 不为 0 #####
dmesg | grep MPPE
MPPE/MPPC encryption/compression module registered


  启动pptpd

# /usr/local/sbin/pptpd
Mar 17 23:07:32 localhost pptpd[4471]:
MGR: Manager process started
Mar 17 23:07:32 localhost pptpd[4471]:
MGR: Maximum of 10 connections available


  设置客户端连接,“安全”里面选择自定义,如图所示,这里取决于你在option.pptpd里面的设置:

Mar 17 23:09:59 localhost pptpd[4473]:
CTRL: Client 192.168.1.136
control connection started
Mar 17 23:09:59 localhost pptpd[4473]:
CTRL: Starting call
(launching pppd, opening GRE)
Mar 17 23:09:59 localhost pppd[4474]:
pppd 2.4.3 started by root, uid 0
Mar 17 23:09:59 localhost pppd[4474]:
Using interface ppp0
Mar 17 23:09:59 localhost pppd[4474]:
Connect: ppp0 <--> /dev/pts/1
Mar 17 23:10:02 localhost pptpd[4473]:
CTRL: Ignored a SET LINK INFO
packet with real ACCMs!
Mar 17 23:10:02 localhost pppd[4474]:
MPPC/MPPE 128-bit stateless compression enabled
Mar 17 23:10:04 localhost pppd[4474]:
found interface eth0 for proxy arp
Mar 17 23:10:04 localhost pppd[4474]:
local IP address 192.168.1.3
Mar 17 23:10:04 localhost pppd[4474]:
remote IP address 192.168.1.230

  成功!
文章评论

共有 2123 条评论

  1. fjnetying 于 2013-10-27 22:19:06发表:

    good! I like it.
    Thankes.

  2. 于 2013-10-24 09:57:21发表:

    不错 !!!顶一个!!!!

  3. hyf_0528 于 2013-07-16 17:18:29发表:

    任务

  4. netct 于 2013-07-03 14:41:18发表:

    这个很需要

  5. netct 于 2013-07-03 14:41:15发表:

    这个很需要

  6. buonaparte 于 2013-06-27 11:07:16发表:

    好帖子

  7. zy898846959 于 2013-02-22 17:23:57发表:

    Great work!

  8. hfxiang 于 2011-06-15 13:36:13发表:

    学习一下RH Linux 9下的VPN Server架设

  9. jhasheng 于 2011-06-04 16:57:33发表:

    要回帖了,分快不够了

  10. china19901107 于 2011-05-26 23:08:23发表:

    不错不错,支持支持!!!!

  11. xiang5206267 于 2011-02-12 17:15:49发表:

    哪里有linux学习的QQ交流群。

  12. lklangzi 于 2010-02-05 15:35:43发表:

    服务器假设要慢慢学。

  13. rootstone 于 2010-01-21 21:47:06发表:

    好复杂啊。。。。

  14. jjk334 于 2010-01-21 15:19:41发表:

    谢谢楼主

  15. jjk334 于 2010-01-21 15:19:29发表:

    谢谢楼主

  16. ljp50598313 于 2009-09-28 11:14:52发表:

    那如果我用Redrat 5.0做网络对网络的VPN呢,是在ADSL动态的IP下,又要怎么做呢!

  17. xiexie256 于 2009-07-17 14:48:57发表:

    厉害。。。。。。。。。。

  18. wangyoubang 于 2009-07-07 20:54:54发表:

    读不懂 ,任谢了

  19. 203.121.67.* 于 2007-09-06 08:55:26发表:

    Thanks boys :
    music downloads = legal music downloads = free limewire = MUSIC DOWNLOADS = free limewire = free limewire = free music downloads = Free Music Downloads = free limewire =
    http://www.nativeecosystems.org/portal_memberdata/portraits/ge3ei3 Free Music Downloads :: http://musicdownloadsmp3.tripod.com/music_downloads.html music downloads :: http://www.geocities.com/musicdowmoads4f/limewire.htm LIMEWIRE :: http://musicdownloadsmp3.tripod.com/ free mp3 music downloads :: http://www.fixgrout.com/cgi/musicpage31.html free limewire :: http://musicdownloadsmp3.tripod.com/ limewire :: http://musicdownloads4free.angelfire.com/free-music.html free music :: http://musicdownloadsmp3.tripod.com/ legal music downloads :: http://www.freewebs.com/1fmusic/limewire.html free limewire :: http://www.geocities.com/musicdowmoads4f/music-downloads.htm free music downloads :: http://www.freewebs.com/1fmusic/music-downloads.html free music ::
    free music downloads .. mp3 music downloads .. LIMEWIRE .. free music downloads .. free limewire .. free limewire .. free mp3 music downloads ..

  20. 203.121.71.* 于 2007-09-06 08:54:05发表:

    Great boys :
    legal music downloads = MUSIC DOWNLOADS = free mp3 downloads = free music download = limewire = limewire = FREE MUSIC DOWNLOADS = free music downloads = mp3 music downloads =
    http://musicdownloads4free.angelfire.com/free-music.html music download :: http://www.fixgrout.com/cgi/musicpage31.html FREE MUSIC DOWNLOADS :: http://idisk.mac.com/fmp3musicdownloads/Public/index.html free music downloads :: http://www.fixgrout.com/cgi/ free mp3 downloads :: http://homepage.mac.com/fmp3musicdownloads/limewire.htm limewire :: http://www.fixgrout.com/cgi/musicpage31.html LIMEWIRE :: http://homepage.mac.com/fmp3musicdownloads/music-downloads-pc.htm music downloads pc :: http://www.fixgrout.com/cgi/musicpage31.html music :: http://www.freewebs.com/1fmusic/limewire.html free music downloads :: http://idisk.mac.com/fmp3musicdownloads/Public/free-limewire.html limewire :: http://musicdownloadsmp3.tripod.com/music_downloads.html free music downloads ::
    music download .. free mp3 music downloads .. FREE MUSIC DOWNLOADS .. music .. limewire .. free limewire .. music downloads pc ..

  21. 81.95.154.* 于 2007-09-06 08:48:57发表:

    Hi, my sites: :
    free music downloads = FREE MUSIC DOWNLOADS = free mp3 downloads = Free Music Downloads = limewire = LIMEWIRE = music downloads = free mp3 music downloads = Free Music Downloads =
    http://musicdownloads4free.angelfire.com/free-music.html free music downloads :: http://www.fixgrout.com/cgi/musicpage31.html free music downloads :: http://idisk.mac.com/fmp3musicdownloads/Public/index.html FREE MUSIC DOWNLOADS :: http://www.fixgrout.com/cgi/ free music downloads :: http://homepage.mac.com/fmp3musicdownloads/limewire.htm limewire :: http://www.fixgrout.com/cgi/musicpage31.html LIMEWIRE :: http://homepage.mac.com/fmp3musicdownloads/music-downloads-pc.htm music downloads pc :: http://www.fixgrout.com/cgi/musicpage31.html free music downloads :: http://www.freewebs.com/1fmusic/limewire.html FREE MUSIC DOWNLOADS :: http://idisk.mac.com/fmp3musicdownloads/Public/free-limewire.html LIMEWIRE :: http://musicdownloadsmp3.tripod.com/music_downloads.html Free Music Downloads ::
    music .. MUSIC DOWNLOADS .. free mp3 downloads .. Free Music Downloads .. limewire .. LIMEWIRE .. music downloads ..

  22. 72.232.63.* 于 2007-09-06 05:09:37发表:

    Nice site!
    jouer casino ligne et roulette | journal des casino | achat machine a sous | casino jeu | machine a sous partouche

  23. 203.121.71.* 于 2007-09-05 07:46:31发表:

    Hi boys! :
    legal music downloads = free music downloads = music downloads = free mp3 = limewire = LIMEWIRE = free music downloads = Free Music Downloads = free mp3 music downloads =
    http://musicdownloads4free.angelfire.com/free-music.html free music downloads :: http://www.fixgrout.com/cgi/musicpage31.html music downloads :: http://idisk.mac.com/fmp3musicdownloads/Public/index.html free mp3 downloads :: http://www.fixgrout.com/cgi/ Free Music Downloads :: http://homepage.mac.com/fmp3musicdownloads/limewire.htm limewire :: http://www.fixgrout.com/cgi/musicpage31.html LIMEWIRE :: http://homepage.mac.com/fmp3musicdownloads/music-downloads-pc.htm free music downloads :: http://www.fixgrout.com/cgi/musicpage31.html free mp3 :: http://www.freewebs.com/1fmusic/limewire.html free music downloads :: http://idisk.mac.com/fmp3musicdownloads/Public/free-limewire.html limewire :: http://musicdownloadsmp3.tripod.com/music_downloads.html MUSIC DOWNLOADS ::
    legal music downloads .. free music .. free music downloads .. music .. limewire .. free limewire .. music downloads ..

  24. 203.121.67.* 于 2007-09-05 07:30:01发表:

    Yhanks you :
    music = music downloads = LIMEWIRE = music download = LIMEWIRE = LIMEWIRE = free music downloads = mp3 music downloads = free limewire =
    http://www.nativeecosystems.org/portal_memberdata/portraits/ge3ei3 FREE MUSIC DOWNLOADS :: http://musicdownloadsmp3.tripod.com/music_downloads.html Free Music Downloads :: http://www.geocities.com/musicdowmoads4f/limewire.htm LIMEWIRE :: http://musicdownloadsmp3.tripod.com/ FREE MUSIC DOWNLOADS :: http://www.fixgrout.com/cgi/musicpage31.html LIMEWIRE :: http://musicdownloadsmp3.tripod.com/ LIMEWIRE :: http://musicdownloads4free.angelfire.com/free-music.html free music :: http://musicdownloadsmp3.tripod.com/ music :: http://www.freewebs.com/1fmusic/limewire.html free limewire :: http://www.geocities.com/musicdowmoads4f/music-downloads.htm music downloads :: http://www.freewebs.com/1fmusic/music-downloads.html music ::
    free music downloads .. legal music downloads .. limewire .. free music .. free limewire .. free limewire .. free music downloads ..

  25. 81.95.154.* 于 2007-09-04 10:26:10发表:

    Hi boys! :
    free music downloads = music = Free Music Downloads = MUSIC DOWNLOADS = limewire = LIMEWIRE = free music downloads = music download = free music downloads =
    http://musicdownloads4free.angelfire.com/free-music.html music :: http://www.fixgrout.com/cgi/musicpage31.html free mp3 :: http://idisk.mac.com/fmp3musicdownloads/Public/index.html FREE MUSIC DOWNLOADS :: http://www.fixgrout.com/cgi/ free music downloads :: http://homepage.mac.com/fmp3musicdownloads/limewire.htm limewire :: http://www.fixgrout.com/cgi/musicpage31.html limewire :: http://homepage.mac.com/fmp3musicdownloads/music-downloads-pc.htm free music downloads :: http://www.fixgrout.com/cgi/musicpage31.html free mp3 :: http://www.freewebs.com/1fmusic/limewire.html free music downloads :: http://idisk.mac.com/fmp3musicdownloads/Public/free-limewire.html free limewire :: http://musicdownloadsmp3.tripod.com/music_downloads.html free music download ::
    free mp3 .. music download .. free music .. free music download .. limewire .. LIMEWIRE .. free music downloads ..