|
我现在有一个情况是这样的,用windows建立了vpn的服务器端,现在想在红旗linux上建立一个vpn的客户端进行连接。我参考了网上的《redhat7_2下面配置VPN客户端》的方法(如下所示),配置了pptp的client,但是建立tunnel时总是建不起来。是否红旗linux下还有其它的不同配置方法吗?
特此请教各位高手,急盼恢复,谢谢。
配置过程都没有提示错误,但是在最后配置完成后,选择1连接时,却没有连接;用3进去查看,只有chap建立了,tunnel却没建立起来,不知是什么原因呢?请红旗的高手指教,谢谢。
1.下载ppp-mppe-2.4.0-4.tar.gz(pppd的补丁版),pptp-linux-1.0.3-1.tar.gz
(pptp客户端),假定下载文件放在/opt下
2.安装
解压缩、安装pppd2.4.0
# cd /opt
# tar zxvf ppp-mppe-2.4.0-4.tar.gz -C /opt
# cd /opt/ppp-mppe-2.4.0-4
# sh unpack.sh ;执行这个脚本,给pppd打patch
# cd ppp-2.4-0
# ./configure
# make
# mv /usr/sbin/pppd /usr/sbin/pppd.old ;原来的pppd做个备份
# cp pppd /usr/sbin/pppd ;将新的pppd放入系统路径
解压缩、安装pptp-linux
# cd /opt
# tar zxvf pptp-linux-1.0.3-1.tar.gz -C /opt
# cd /opt/pptp-linux-1.0.3-1
# cp options.pptp /etc/ppp/
# mkdir /etc/pptp.d/ ; 这一步不做也可以
# tar zxvf pptp-linux-1.0.3.tar.gz
# cd pptp-linux-1.0.3
# make
# cp pptp /usr/sbin
# cp pptp-callmgr /usr/bin
3. 设置
# cd /opt/pptp-linux-1.0.3-1
# ./pptp-command
1.) start
2.) stop
3.) setup
4.) quit
What task would you like to do?:3
选3,设置
1.) List CHAP secrets
2.) Add a New CHAP secret
3.) Delete a CHAP secret
4.) List PPTP Tunnels
5.) Add a NEW PPTP Tunnel
6.) Delete a PPTP Tunnel
7.) Configure resolv.conf
8.) Select a default tunnel
9.) Quit
?:2 ;先建立一个CHAP secrets,选择2
Add a NEW CHAP secret.
NOTE: Any backslashes () must be doubled (\).
Local Name:
This is the 'local' identifier for CHAP authentication.
NOTE: If the server is a Windows NT machine, the local name
should be your Windows NT uname including domain.
For example:
domain\username
Local Name:pptp ;这里填上pptp的登录用户名称,然后出现
Remote Name:
This is the 'remote' identifier for CHAP authentication.
In most cases, this can be left as the default. If must be
set if you have multiple CHAP secrets with the same local name
and different passwords. Just press ENTER to keep the default.
Remote Name [PPTP]: ;用默认的PPTP就行,所以,回车进入下一项
Password:
This is the password or CHAP secret for the account specified. The
password will not be echoed.
Password: ;在这里敲入密码,密码不回显
回到主选单
Adding secret pptp PPTP *****
1.) List CHAP secrets
2.) Add a New CHAP secret
3.) Delete a CHAP secret
4.) List PPTP Tunnels
5.) Add a NEW PPTP Tunnel
6.) Delete a PPTP Tunnel
7.) Configure resolv.conf
8.) Select a default tunnel
9.) Quit
?: ;此时建立一个新的PPTP Tunnel,选择5
Add a NEW PPTP Tunnel.
1.) Other
Which configuration would you like to use?:1 ;只有这一个,选1
Tunnel Name: test ;给连接起名字test
Server IP: 10.0.0.227 ;vpn服务器的ip
What route(s) would you like to add when the tunnel comes up?
This is usually a route to your internal network behind the PPTP server.
You can use TUNNEL_DEV and DEF_GW as in /etc/pptp.d/ config file
TUNNEL_DEV is replaced by the device of the tunnel interface.
DEF_GW is replaced by the existing default gateway.
The syntax to use is the same as the route( command.
Enter a blank line to stop.
route: TUNNEL_DEV ;用提示的输入
route: ;一个就够了,回车结束
Local Name and Remote Name should match a configured CHAP secret.
Local Name is probably your NT domainusername.
NOTE: Any backslashes () must be doubled (\).
Local Name: pptp
Remote Name [PPTP]:
Adding test - 10.0.0.227 - pptp - PPTP
Added tunnel test
1.) List CHAP secrets
2.) Add a New CHAP secret
3.) Delete a CHAP secret
4.) List PPTP Tunnels
5.) Add a NEW PPTP Tunnel
6.) Delete a PPTP Tunnel
7.) Configure resolv.conf
8.) Select a default tunnel
9.) Quit
?:9
退出后再进入程序
# ./pptp-command
1.) start
2.) stop
3.) setup
4.) quit
What task would you like to do?: 1 ;选1,开始
1.) test
Start a tunnel to which server?: test ;在选择要连接的名称
注意:pptp-command这个脚本有个bug,开始连接后不能正常结束程序,并且在连接建立后给出个错误的路由,
# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.0.227 * 255.255.255.255 UH 0 0 0 ppp0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 10.0.0.1 0.0.0.0 UG 0 0 0 eth0
解决方法为
先删除错误那个错误的路由
# route del 10.0.0.227
然后
# route add -net 10.3.3.0/24 dev ppp0 |
|