linuxredhat9:pptpdvpn服务器的配置

出处：www.linuxstudy.cn 作者：LEO 时间：2004-11-1 9:38:00

linuxredhat9:pptpdvpn服务器的配置及说明

linux red hat 9 : pptpd vpn服务器的配置及说明
公司需要配置一个vpn的服务器，我选择了pptp这个协议，相关的软件如下：
1、kernelmod-0.7.1.tar.gz              #MPPE的kernel补丁
2、ppp-2.4.2-b3.i386.rpm             #升级PPP
3、pptpd-1.1.4-b4.i386.rpm          #pptpd的软件
环境:
OS:red hat 9
在安装系统之后首先安装或升级PPP:
#rpm -qa|grep ppp                                             #查询PPP有没有安装
#rpm -ivh pptpd-1.1.4-b4.i386.rpm                   #安装PPP
#rpm -Uvh  pptpd-1.1.4-b4.i386.rpm                #升级PPP

相关配置：
/etc/pptpd.conf   pptpd的配置文件
/etc/ppp/options.pptpd      这是选项文件，我把它叫做控制文件
/etc/ppp/chap-secrtes    这是开帐户用的文件
实例：
                           /etc/pptpd.conf:
################################################################################
#
# Sample PoPToP configuration file
#
# for PoPToP version 1.1.4-b3
#
################################################################################

# TAG: speed
#
# Specifies the speed for the PPP daemon to talk at.
#
#speed 115200

# TAG: option
#
# Specifies the location of the PPP options file.
# By default PPP looks in '/etc/ppp/options'
#
option /etc/ppp/options.pptpd

# TAG: stimeout
#
# Specifies timeout (in seconds) on starting ctrl connection
#
# stimeout 10

# TAG: debug
#
# Turns on (more) debugging to syslog
#
debug

# TAG: bcrelay <if>
#
# Turns on broadcast relay to clients from interface <if>
#
#bcrelay eth0
listen 11.1.1.97

# TAG: localip
# TAG: remoteip
#
# Specifies the local and remote IP address ranges.
#
# You can specify single IP addresses seperated by commas or you can
# specify ranges, or both. For example:
#
#  192.168.0.234,192.168.0.245-249,192.168.0.254
#
# IMPORTANT RESTRICTIONS:
#
# 1. No spaces are permitted between commas or within addresses.
#
# 2. If you give more IP addresses than MAX_CONNECTIONS, it will
#    start at the beginning of the list and go until it gets
#    MAX_CONNECTIONS IPs. Others will be ignored.
#
# 3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238,
#    you must type 234-238 if you mean this.
#
# 4. If you give a single localIP, that's ok - all local IPs will
#    be set to the given one. You MUST still give at least one remote
#    IP for each simultaneous client.
#
localip 192.168.10.1
remoteip 192.168.10.100-240
netmast 255.255.255.0
# or
#localip 192.168.0.234-238,192.168.0.245
#remoteip 192.168.1.234-238,192.168.1.245

########################################################################################

                                                               /etc/options.pptpd
## CHANGE TO SUIT YOUR SYSTEM
lock

## turn pppd syslog debugging on
debug
dump
logfd 2
logfile /var/log/pptpd.log

## change 'pptpd' to whatever you specify as your server name in chap-secrets
name pptpd
mtu 1450
mru 1450
proxyarp
auth
#bsdcomp 0

# This option applies if you use ppp with chapms-strip-domain patch
#chapms-strip-domain
nobsdcomp
# These options apply if you use ppp with mppe patch
# NB! You should also apply the ChapMS-V2 patch
#+chap
#-chapms
#+chapms-v2
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
#mppe-128
#mppe-stateless
refuse-pap
refuse-chap
refuse-mschap
refuse-eap
require-mschap-v2
# These options will tell ppp to pass on these to your clients
# To use ms-wins or ms-dns in options.pptpd it must exist in /etc/resolv.conf
multilink
require-mppe
#ms-wins your.server.here
#ms-dns 61.134.1.9

########################################################################################

                                                     /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client                server                         secret                          IP addresses
####### redhat-config-network will overwrite this part!!! (begin) ##########
####### redhat-config-network will overwrite this part!!! (end) ############
user1                   pptpd                       password1                               *
user2                   pptpd                       password2                               *

查看内核是否支持Mppe :
#strings ' /usr/sbin/pppd' |grep -i mppe|wc --lines
大于30则支持mppe
加入模块

#modprobe ppp_mppe
出现一些提示说明成功加载

启动pptpd:
service pptpd start

分享到：

最新专题

鸟哥的Linux私房菜之Mail服务器

Exchange Server 2010技术专题

Windows 7 技术专题

Sendmail 邮件系统配置

组建Exchange 2003邮件系统

Windows Server 2008 专题

ORF 反垃圾邮件系统

Exchange Server 2007 专题

分类导航

操作系统

linuxredhat9:pptpdvpn服务器的配置