Build a VPN server under CentOS 6.2

Little scum · Posted on 5/18/2015 11:37:16 PM

1. Install PPP via Yum:

$ yum install ppp -y

Copy code

2. Download and install pptpd, you can get http://poptop.sourceforge.net/yum/stable/packages/ on this website :

(Depending on the number of bits in the operating system, here is the x86_64 version of 64-bit)

$ cd /usr/local/src $ wget http://poptop.sourceforge.net/yum/stable/packages/pptpd-1.3.4-2.el6.x86_64.rpm $ rpm -Uhv pptpd-1.3.4-2.el6.x86_64.rpm

Copy code

3. After installation, open /etc/pptpd.conf and add or modify the following configuration:

localip 192.168.0.1 remoteip 192.168.0.234-238
4. Open /etc/ppp/options.pptpd to add the VPN's DNS (using Google's DNS):

ms-dns 8.8.8.8

Copy code

5. Add an account to the VPN, open /etc/ppp/chap-secrets, and add a username and password in the following format:

vpnuser pptpd myVPN$99 *

Copy code

The format is this: [username] [space] [server] [space] [password] [space][IP addresses]

6. We need to enable IP forwarding of the service. Open /etc/sysctl.conf and change the following configuration:

net.ipv4.ip_forward = 1#net.ipv4.tcp_syncookies = 1 注释掉这一行

Copy code

7. Run the following command to make the configuration take effect:

$ sysctl -p

Copy code

8. Add rules in the firewall to allow NAT translation:

$ iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE $ service iptables save $ service iptables restart

Copy code

Note: When you finish step 8, check /etc/sysconfig/iptables. Make sure the POSTROUTING rule precedes any REJECT rule

Depending on the VPS implementation, there are mainly openVZ and XEN. The two rules are:

OpenVZ: $iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j SNAT --to-source **.**.**.**（这里为VPS公网IP）
XEN:iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE

Copy code

9. Enable the self-start of the PPTPD service and restart the server

$ chkconfig pptpd on

Copy code

[VPN] Build a VPN server under CentOS 6.2

Related Posts

Sections viewed