linux 搭建VPN 虚拟专用网络 (pptpd )

1.安装pptpd

[root@VM_0_6_centos etc]# yum install -y pptpd

2.对虚拟专用网络进行IP段分配

[root@VM_0_6_centos etc]# vim /etc/pptpd.conf 
 
localip 192.168.0.1
remoteip 192.168.0.234-238,192.168.0.245

3.指定DNS写入文件末尾即可

[root@VM_0_6_centos etc]# vim /etc/ppp/options.pptpd
 
ms-dns 8.8.8.8
ms-dns 8.8.4.4

4.配置用户名和密码

[root@VM_0_6_centos etc]# vim /etc/ppp/chap-secrets
 
# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
nidebaba       pptpd    123456                    *

5、开启IP转发

[root@VM_0_6_centos etc]# vim /etc/sysctl.conf
#将“net.ipv4.ip_forward = 0”改为“net.ipv4.ip_forward = 1”
 
# Controls IP packet forwarding
net.ipv4.ip_forward = 1

转发生效

[root@VM_0_6_centos etc]# sysctl -p

6.配置转发策略以及开放常用的端口

[root@VM_0_6_centos ppp]# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
[root@VM_0_6_centos ppp]#  iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
[root@VM_0_6_centos ppp]#  iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT

7、重启pptpd服务

[root@VM_0_6_centos etc]# systemctl start pptpd.service

8、检查状态

#检查状态active (running)为成功
[root@VM_0_6_centos etc]# systemctl status pptpd.service
● pptpd.service - PoPToP Point to Point Tunneling Server
   Loaded: loaded (/usr/lib/systemd/system/pptpd.service; enabled; vendor preset: disabled)
   Active: active (running) since 五 2019-01-04 11:15:53 CST; 4h 17min ago
 Main PID: 19053 (pptpd)
   CGroup: /system.slice/pptpd.service
           └─19053 /usr/sbin/pptpd -f

9.链接虚拟专用网络

虚，不要告诉别人自己偷建了梯子，(*^▽^*)