安装VPN 配置好yum源

yum -y install ppp

yum -y install pptpd

服务ip地址

eth0      Link encap:Ethernet  HWaddr 00:16:3E:00:0A:85 

          inet addr:10.90.16.156  Bcast:10.90.31.255  Mask:255.255.240.0（内网）

eth1      Link encap:Ethernet  HWaddr 00:16:3E:00:05:B9 

          inet addr:58.96.171.210  Bcast:58.96.171.255  Mask:255.255.252.0（外网）

vi /etc/pptpd.conf

ppp /usr/sbin/pppd

option /etc/ppp/options.pptpd 

#logwtmp  注释这一行

localip 10.90.16.156

remoteip 192.168.0.234-238,192.168.0.245  vpn客户端获取的ip地址范围

vi /etc/ppp/options.pptpd

添加 为vpn客户端指定dns

ms-dns 202.106.196.115

ms-dns 8.8.8.8

vi /etc/ppp/chap-secrets

# Secrets for authentication using CHAP

# client        server  secret                  IP addresses

test      pptpd  test123                  *

添加用户名，密码 ，* 代表从IP地址范围内获取，或者直接指定

1. 修改内核文件，使系统支持转发

#vi /etc/sysctl.conf 

net.ipv4.ip_forward = 1

然后执行下列命令，使其生效：

#sysctl –p

配置iptables 
iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
保存一下iptables

/sbin/service iptables save

启动pptpd 服务

/etc/init.d/pptpd start  检查1723端口

2 ，增加vpn客户端ip范围

vi /etc/pptpd.conf

修改

remoteip 192.168.0.234-243 来修改允许客户端连接的ip范围

保存退出

重启pptpd 服务

执行 service pptpd restart

ok 之后即生效

3，增加vpn客户端账号

vi /etc/ppp/chap-secrets

内容如下

# Secrets for authentication using CHAP

#client server secret IP address

vacn_vpn pptpd vacn123!@# *

此行即为创建密码为vacn123!@# 的账号vacn_vpn

添加其他账号按照 vacn_vpn pptpd vacn123!@# * 此种格式

vacn_vpn ----用户名

test123!@#3456---密码

* -----------vpn连接的ip *为自动分配给vpn客户端192.168.0.234-243 其中的一个地址，或者直接指定地址

保存退出，不用重启pptpd服务

一键安装脚本
#!/bin/bash function installVPN(){
 echo "begin to install VPN services"; #check wether vps suppot ppp and tun  yum remove -y pptpd ppp
 iptables --flush POSTROUTING --table nat
 iptables --flush FORWARD rm -rf /etc/pptpd.conf rm -rf /etc/ppp
  arch=`uname -m`  wget http://www.hi-vps.com/downloads/dkms-2.0.17.5-1.noarch.rpm wget http://wty.name/linux/sources/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm wget http://www.hi-vps.com/downloads/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm wget http://www.hi-vps.com/downloads/pptpd-1.3.4-2.el6.$arch.rpm wget http://www.hi-vps.com/downloads/ppp-2.4.5-17.0.rhel6.$arch.rpm
 
  yum -y install make libpcap iptables gcc-c++ logrotate tar cpio perl pam tcp_wrappers
 rpm -ivh dkms-2.0.17.5-1.noarch.rpm
 rpm -ivh kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
 rpm -qa kernel_ppp_mppe
 rpm -Uvh ppp-2.4.5-17.0.rhel6.$arch.rpm 
 rpm -ivh pptpd-1.3.4-2.el6.$arch.rpm
  mknod /dev/ppp c 108 0 
 echo 1 > /proc/sys/net/ipv4/ip_forward 
 echo "mknod /dev/ppp c 108 0" >> /etc/rc.local echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local echo "localip 172.16.36.1" >> /etc/pptpd.conf echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd
  pass=`openssl rand 6 -base64`
 if [ "$1" != "" ]
 then pass=$1
 fi  echo "vpn pptpd ${pass} *" >> /etc/ppp/chap-secrets
 
 iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`
 iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
 service iptables save
 
 chkconfig iptables on
 chkconfig pptpd on
 
 service iptables start
 service pptpd start
  echo "VPN service is installed, your VPN username is vpn, VPN password is ${pass}" } function repaireVPN(){
 echo "begin to repaire VPN"; mknod /dev/ppp c 108 0
 service iptables restart
 service pptpd start} function addVPNuser(){
 echo "input user name:"
 read username echo "input password:"
 read userpassword echo "${username} pptpd ${userpassword} *" >> /etc/ppp/chap-secrets
 service iptables restart
 service pptpd start} echo "which do you want to?input the number."echo "1. install VPN service"echo "2. repaire VPN service"echo "3. add VPN user"read num
 case "$num" in[1] ) (installVPN);;[2] ) (repaireVPN);;[3] ) (addVPNuser);;*) echo "nothing,exit";;esac