linux虚拟专用网络设置,linux 搭建 虚拟专用网络 (pptpd )

1.安装pptpd

[root@VM_0_6_centos etc]# yum install -y pptpd

2.对虚拟专用网络进行IP段分配

[root@VM_0_6_centos etc]# vim /etc/pptpd.conf

localip 193.112.40.37

remoteip 172.16.1.120-200

3.指定DNS写入文件末尾即可

[root@VM_0_6_centos etc]# vim /etc/ppp/options.pptpd

ms-dns 8.8.8.8

ms-dns 8.8.4.4

4.配置用户名和密码

[root@VM_0_6_centos etc]# vim /etc/ppp/chap-secrets

# Secrets for authentication using CHAP

# client server secret IP addresses

xingyulin pptpd 123456 *

5、开启IP转发

[root@VM_0_6_centos etc]# vim /etc/sysctl.conf

#将“net.ipv4.ip_forward = 0”改为“net.ipv4.ip_forward = 1”

# Controls IP packet forwarding

net.ipv4.ip_forward = 1

转发生效

[root@VM_0_6_centos etc]# sysctl -p

6.配置转发策略以及开放常用的端口

[root@VM_0_6_centos ppp]# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT

[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT

[root@VM_0_6_centos ppp]# iptables -A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT

7、重启pptpd服务

[root@VM_0_6_centos etc]# systemctl start pptpd.service

#检查状态active (running)为成功

[root@VM_0_6_centos etc]# systemctl status pptpd.service

● pptpd.service - PoPToP Point to Point Tunneling Server

Loaded: loaded (/usr/lib/systemd/system/pptpd.service; enabled; vendor preset: disabled)

Active: active (running) since 五 2019-01-04 11:15:53 CST; 4h 17min ago

Main PID: 19053 (pptpd)

CGroup: /system.slice/pptpd.service

└─19053 /usr/sbin/pptpd -f

8.链接虚拟专用网络测试