LinuxForum.Fans
Тема

VPN L2TP

Автор: mgukov 2 сообщений 8437 просмотров
#25115

Нужно настроить VPN L2TP соединение на сервере для раздачи интернета во внутреннюю сеть. Сервер на ALT Linux 5.0 ark server.
В гугле нашел как настроить xl2ptd-1.1.12, попытался таким же образом настроить у себя l2tpd (l2tpd-0.69-alt2.i586.rpm)

--- /etc/l2tpd/l2tpd.conf ---
[global]
access control = yes

[lac corbina]
lns = vpn.local
redial = yes
redial timeout = 1
require chap = yes
require authentication = no
name = <ИМЯ ПОЛЬЗОВАТЕЛЯ>
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd
require pap = no
autodial = yes


--- /etc/ppp/options.l2tpd ---
name <ИМЯ ПОЛЬЗОВАТЕЛЯ>
remotename l2tp
ipparam corbina
connect /bin/true
nodeflate
nobsdcomp
persist
maxfail 0
nopcomp
noaccomp
defaultroute

--- /etc/ppp/chap-secrets ---
<ИМЯ ПОЛЬЗОВАТЕЛЯ> * <ПАРОЛЬ>

Результат:

text

Apr  7 05:15:25 virtualpc l2tpd[21224]: lac_call: Calling on tunnel 64060
Apr  7 05:15:25 virtualpc l2tpd[21224]: control_finish: Call established with 172.21.1.14, Local: 54771, Remote: 19271, Serial: 226
Apr  7 05:15:25 virtualpc pppd[26804]: pppd 2.4.4 started by root, uid 0
Apr  7 05:15:25 virtualpc l2tpd[21224]: control_finish: Connection closed to 172.21.1.14, serial 226 ()
Apr  7 05:15:25 virtualpc pppd[26804]: Failed to open /dev/ttyp0: Input/output error
Apr  7 05:15:25 virtualpc Failed to open /dev/ttyp0: Input/output error
Apr  7 05:15:25 virtualpc
Apr  7 05:15:25 virtualpc pppd[26804]: Failed to reopen /dev/ttyp0: Input/output error
Apr  7 05:15:25 virtualpc Failed to reopen /dev/ttyp0: Input/output error
Apr  7 05:15:25 virtualpc
Apr  7 05:15:25 virtualpc pppd[26804]: Terminating on signal 15
Apr  7 05:15:25 virtualpc Terminating on signal 15
#25119

вот вам инструкция с локального форума пользователя sergej для подключения через впн:
xl2tpd настраивается примерно так:

(ипшник 10.0.175.193 поменять на свой и заменить ИМЯ_ПОЛЬЗОВАТЕЛЯ и ПАРОЛЬ)

/etc/xl2tpd/xl2tpd.conf

text

[global]
access control = no
auth file = /etc/ppp/chap-secrets
debug avp = no
debug network = no
debug packet = no
debug state = no
debug tunnel = no

[lac L2TP.freedom] lns = l2tp.freedom redial = yes redial timeout = 5 require chap = yes require authentication = no name = icl2tp ppp debug = no pppoptfile = /etc/ppp/peers/freedom-l2tp require pap = no autodial = yes

/etc/ppp/peers/freedom-l2tp

text

maxfail 0
lcp-echo-interval 120
lcp-echo-failure 10
defaultroute
user ИМЯ_ПОЛЬЗОВАТЕЛЯ
remotename PPTP
lock
noauth
ipparam icl2tp
deflate 15,15
mtu 1400
unit 5
logfile /var/log/pppd-connect-errors.log

default-asyncmap ipcp-accept-local ipcp-accept-remote #debug

nodeflate nobsdcomp nopcomp noaccomp

/etc/ppp/chap-secrets

text

# Secrets for authentication using CHAP
# client            server  secret                  IP addresses
"ИМЯ_ПОЛЬЗОВАТЕЛЯ"  *       "ПАРОЛЬ"                *

/etc/ppp/ip-up

text

#!/bin/sh

LOG=/var/log/ip-scripts.log

CONN_NAME=$6

case $CONN_NAME in icl2tp) /sbin/route add -net 192.168.149.0/24 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route add 195.98.64.92 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route add 195.98.64.65 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route add 195.98.64.66 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route del default 1>>$LOG 2>>$LOG GW=`/sbin/ifconfig ppp5|grep 'P-t-P' | cut -f 3 -d : | cut -f 1 -d \ ` echo "Gateway = $GW" 1>>$LOG 2>>$LOG /sbin/route add default gw $GW 1>>$LOG 2>>$LOG /sbin/route add -net 10.0.0.0/8 gw 10.0.175.193 1>>$LOG 2>>$LOG # /bin/echo "nameserver 127.0.0.1" >/etc/resolv.conf 2>>$LOG ;; *) ;; esac

/etc/ppp/ip-down

text

#!/bin/sh

LOG=/var/log/ip-scripts.log

CONN_NAME=$6

case $CONN_NAME in icl2tp) /sbin/route del -net 192.168.149.0/24 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route del 195.98.64.92 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route del 195.98.64.65 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route del 195.98.64.66 gw 10.0.175.193 1>>$LOG 2>>$LOG /sbin/route del -net 10.0.0.0/8 gw 10.0.175.193 1>>$LOG 2>>$LOG # /sbin/route del default 1>>$LOG 2>>$LOG /sbin/route add default gw 10.0.175.193 1>>$LOG 2>>$LOG ;; *) ;; esac

/etc/resolv.conf

text

nameserver 195.98.64.65
nameserver 195.98.64.66
Войдите или зарегистрируйтесь, чтобы ответить.