Last active
February 7, 2023 04:45
-
-
Save qykong/7ba081bafc9df1ec34809c52c18bc99c to your computer and use it in GitHub Desktop.
Setup PPTP VPN on CentOS7
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Got from https://www.digitalocean.com/community/questions/how-to-install-pptp-vpn-on-centos-7 and changed new workable epel rpm url | |
rpm -Uvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-8.noarch.rpm | |
yum -y install ppp pptpd | |
cp /etc/pptpd.conf /etc/pptpd.conf.bak | |
cat >/etc/pptpd.conf<<EOF | |
option /etc/ppp/options.pptpd | |
logwtmp | |
localip 10.0.10.1 | |
remoteip 10.0.10.2-254 | |
EOF | |
cp /etc/ppp/options.pptpd /etc/ppp/options.pptpd.bak | |
cat >/etc/ppp/options.pptpd<<EOF | |
name pptpd | |
refuse-pap | |
refuse-chap | |
refuse-mschap | |
require-mschap-v2 | |
require-mppe-128 | |
proxyarp | |
lock | |
nobsdcomp | |
novj | |
novjccomp | |
nologfd | |
ms-dns 8.8.8.8 | |
ms-dns 8.8.4.4 | |
EOF | |
cp /etc/ppp/chap-secrets /etc/ppp/chap-secrets.bak | |
cat >/etc/ppp/chap-secrets<<EOF | |
USERNAME pptpd PASSWORD * | |
EOF | |
cp /etc/sysctl.conf /etc/sysctl.conf.bak | |
cat >/etc/sysctl.conf<<EOF | |
net.core.wmem_max = 12582912 | |
net.core.rmem_max = 12582912 | |
net.ipv4.tcp_rmem = 10240 87380 12582912 | |
net.ipv4.tcp_wmem = 10240 87380 12582912 | |
net.core.wmem_max = 12582912 | |
net.core.rmem_max = 12582912 | |
net.ipv4.tcp_rmem = 10240 87380 12582912 | |
net.ipv4.tcp_wmem = 10240 87380 12582912 | |
net.core.wmem_max = 12582912 | |
net.core.rmem_max = 12582912 | |
net.ipv4.tcp_rmem = 10240 87380 12582912 | |
net.ipv4.tcp_wmem = 10240 87380 12582912 | |
net.ipv4.ip_forward = 1 | |
EOF | |
sysctl -p | |
chmod +x /etc/rc.d/rc.local | |
echo "iptables -t nat -A POSTROUTING -s 10.0.10.0/24 -o eth0 -j MASQUERADE" >> /etc/rc.d/rc.local | |
iptables -t nat -A POSTROUTING -s 10.0.10.0/24 -o eth0 -j MASQUERADE | |
systemctl start pptpd | |
systemctl enable pptpd.service |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment