l2tp pptp相关的一些记录

最新推荐文章于 2025-07-25 16:55:01 发布

weixin_34037173

最新推荐文章于 2025-07-25 16:55:01 发布

阅读量374

点赞数

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/xiangnan/p/9434389.html

本文介绍如何通过修改配置文件来调整L2TP/IPSec连接的参数，包括添加用户名和密码、设置Dead Peer Detection（DPD）的延迟和超时时间等。这些设置能够帮助提高连接稳定性和安全性。

添加用户名和密码

echo "user l2tpd password *">>/etc/ppp/chap-secrets

/etc/ipsec.conf

  dpddelay=30
  dpdtimeout=120

改为

  dpddelay=5
  dpdtimeout=5

http://linux.die.net/man/5/ipsec.conf
dpddelay Set the delay (in seconds) between Dead Peer Dectection (RFC 3706) keepalives (R_U_THERE, R_U_THERE_ACK) that are sent for this connection。

dpdtimeout Set the length of time (in seconds) we will idle without hearing either an R_U_THERE poll from our peer, or an R_U_THERE_ACK reply.

dpdaction ：When a DPD enabled peer is declared dead, what action should be taken. hold (default) means the eroute will be put into %hold status, while clear means the eroute and SA with both be cleared. restart means the the SA will immediately be renegotiated, and restart_by_peer means that ALL SA's to the dead peer will renegotiated.

dpdaction=clear is really only useful on the server of a Road Warrior config.