pptp网络环境部署

た入场券 2022-01-15 12:13 292阅读 0赞

**服务器准备**

安装centos7.2系统，最小化安装

设置好网络和防火墙 网络需要能访问外网，

ip 192.168.0.195

下面关闭防火墙

setenforce 0

systemctl stop firewalld

systemctl disable firewalld

sed -i 's/enforcing/disabled/g' /etc/sysconfig/selinux

**设置yum源**

cd /etc/yum.repos.d/

yum install vim unzip lrzsz wget net-tools -y

wget [http://mirrors.aliyun.com/repo/Centos-7.repo][http_mirrors.aliyun.com_repo_Centos-7.repo]

wget [http://mirrors.aliyun.com/repo/epel-7.repo][http_mirrors.aliyun.com_repo_epel-7.repo]

yum -y install epel-release

**yum安装pptp**

yum install perl ppp iptables pptpd lsof

**修改配置**

配置pptpd.conf

cp /etc/pptpd.conf /tmp/pptpd.conf.bak
    vim /etc/pptpd.conf
    #添加如下两行
    localip 192.168.0.195                 ## 服务器ip地址         
    remoteip 10.0.0.1-100            ##虚拟内网用于分配给客户端的ip网段，不能与服务器ip同网段

配置options.pptpd

cp /etc/ppp/options.pptpd /tmp/options.pptpd.bak        #备份原始的配置文件
    vim /etc/ppp/options.pptpd                              #编辑配置文件
    #加入下面两行
    ms-dns 8.8.8.8
    ms-dns 114.114.114.114

配置账户文件chap-secrets

cp /etc/ppp/chap-secrets /root/backup/chap-secrets.bak        #备份原始配置文件
    vim /etc/ppp/chap-secrets                                     #编辑配置文件
    # Secrets for authentication using CHAP
    # client        server  secret              IP addresses
      testuser      pptpd   123456               *                #添加用户名testuser,密码123456，允许所有主机连接。

配置sysctl.conf

vim /etc/sysctl.conf
    et.ipv4.ip_forward=1                        #开启转发功能
    sysctl -p

启动pptp

systemctl start pptpd

\#\#开启防火墙的nat转发规则

iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j MASQUERADE

iptables 可参考

#!/bin/bashPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
    export PATH
    #加载相关模块:
    modprobe ip_tables
    modprobe iptable_nat
    modprobe ip_nat_ftp
    modprobe ip_nat_irc
    modprobe ip_conntrack
    modprobe ip_conntrack_ftp
    modprobe ip_conntrack_irc 
     
    # 清空所有规则:iptables -F
    iptables -X
    iptables -Z
    iptables -F -t nat
    iptables -X -t nat
    iptables -Z -t nat  
    # 设置默认规则:                                                
    iptables -P INPUT DROP                               #默认拒绝所有进入的请求
    iptables -P OUTPUT DROP                              #默认拒绝所有出去的请求
    iptables -P FORWARD DROP                             #默认拒绝所有转发的请求
    iptables -t nat -P PREROUTING ACCEPT               
    iptables -t nat -P POSTROUTING ACCEPT               
    iptables -t nat -P OUTPUT ACCEPT                     #默认允许所有nat的请求
     # 允许所有进出回环口的请求
    iptables -A INPUT -i lo -j ACCEPT 
    # 允许特定端口(对应服务)的请求
    iptables -A INPUT -p tcp --dport 22 -j ACCEPT             #ssh
    iptables -A INPUT -p tcp --dport 21 -j ACCEPT             #ftp
    iptables -A INPUT -p tcp --dport 20 -j ACCEPT             #ftp
    iptables -A INPUT -p tcp --dport 80 -j ACCEPT             #www
    iptables -A INPUT -p tcp --dport 1723 -j ACCEPT           #PPT
    iptables -A INPUT -p gre -j ACCEPT                        #grp，协议号47
    iptables -A INPUT -p tcp --sport 443 -j ACCEPT
    iptables -A INPUT -p udp --sport 53 -j ACCEPT 
    
    iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT            #允许×××客户端转发
    iptables -A FORWARD -d 192.168.0.0/24 -j ACCEPT            #允许×××客户端转发
    iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j MASQUERADE        #nat地址转换
    iptables -I OUTPUT 1 -o eth0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT    #允许外出请求

window7 配置pptp连接

打开网络与共享--设置新的网络

![QQ截图20190425170757.png][QQ_20190425170757.png]

选择连接到工作区

![QQ截图20190425170821.png][QQ_20190425170821.png]

![QQ截图20190425170916.png][QQ_20190425170916.png]

填写v-p-n地址

![QQ截图20190425170942.png][QQ_20190425170942.png]

填写相应的账户密码

![QQ截图20190425171014.png][QQ_20190425171014.png]

![QQ截图20190425171108.png][QQ_20190425171108.png]

点开网络--属性--安全--网络

![QQ截图20190425171236.png][QQ_20190425171236.png]![QQ截图20190425171315.png][QQ_20190425171315.png]

![QQ截图20190425171530.png][QQ_20190425171530.png]

![QQ截图20190425171609.png][QQ_20190425171609.png]

到此pptp连接完成

可参考文章

[https://docs.ucloud.cn/software/\*\*\*/pptp4centos][https_docs.ucloud.cn_software_pptp4centos]

[https://blog.51cto.com/michael2017/1429462][https_blog.51cto.com_michael2017_1429462]

[https://blog.51cto.com/10802692/2177227][https_blog.51cto.com_10802692_2177227]

[https://www.cnblogs.com/along21/p/8377122.html][https_www.cnblogs.com_along21_p_8377122.html]

转载于:https://blog.51cto.com/superleedo/2384738

[http_mirrors.aliyun.com_repo_Centos-7.repo]: http://mirrors.aliyun.com/repo/Centos-7.repo
[http_mirrors.aliyun.com_repo_epel-7.repo]: http://mirrors.aliyun.com/repo/epel-7.repo
[QQ_20190425170757.png]: https://s1.51cto.com/images/20190425/1556185499837031.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425170821.png]: https://s1.51cto.com/images/20190425/1556185566608899.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425170916.png]: https://s1.51cto.com/images/20190425/1556185588370837.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425170942.png]: https://s1.51cto.com/images/20190425/1556185634944942.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171014.png]: https://s1.51cto.com/images/20190425/1556185676503945.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171108.png]: https://s1.51cto.com/images/20190425/1556185707207894.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171236.png]: https://s1.51cto.com/images/20190425/1556185748753123.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171315.png]: https://s1.51cto.com/images/20190425/1556185773626311.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171530.png]: https://s1.51cto.com/images/20190425/1556185817616762.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[QQ_20190425171609.png]: https://s1.51cto.com/images/20190425/1556185841946926.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=
[https_docs.ucloud.cn_software_pptp4centos]: https://docs.ucloud.cn/software/***/pptp4centos
[https_blog.51cto.com_michael2017_1429462]: https://blog.51cto.com/michael2017/1429462
[https_blog.51cto.com_10802692_2177227]: https://blog.51cto.com/10802692/2177227
[https_www.cnblogs.com_along21_p_8377122.html]: https://www.cnblogs.com/along21/p/8377122.html