Centos 6 搭建VPN 脚本
* 此脚本最多适合一个C段的IP
* 此脚本自带安装、修复、添加用户功能
* 此脚本适合Centos 6 版本
#!/bin/bash
function install×××(){
echo "begin to install ××× services";
#check wether vps suppot ppp and tun
yum remove -y pptpd ppp
iptables --flush POSTROUTING --table nat
iptables --flush FORWARD
rm -rf /etc/pptpd.conf
rm -rf /etc/ppp
arch=`uname -m`
wget http:///centos/downloads/dkms-2.0.17.5-1.noarch.rpm
wget http:///centos/downloads/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
wget http:///centos/downloads/ppp-2.4.5-17.0.rhel6.x86_64.rpm
wget http:///centos/downloads/pptpd-1.3.4-2.el6.x86_64.rpm
yum -y install make libpcap iptables gcc-c++ logrotate tar cpio perl pam tcp_wrappers
rpm -ivh dkms-2.0.17.5-1.noarch.rpm
rpm -ivh kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
rpm -qa kernel_ppp_mppe
rpm -Uvh ppp-2.4.5-17.0.rhel6.x86_64.rpm
rpm -ivh pptpd-1.3.4-2.el6.x86_64.rpm
mknod /dev/ppp c 108 0
echo 1 > /proc/sys/net/ipv4/ip_forward
echo "mknod /dev/ppp c 108 0" >> /etc/rc.local
echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local
echo "localip 172.16.36.1" >> /etc/pptpd.conf
echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf
echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd
echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd
pass=`openssl rand 6 -base64`
if [ "$1" != "" ]
then pass=$1
fi
echo "vpn pptpd ${pass} *" >> /etc/ppp/chap-secrets
iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`
iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
service iptables save
chkconfig iptables on
chkconfig pptpd on
service iptables start
service pptpd start
echo "××× service is installed, your ××× username is vpn, ××× password is ${pass}"
}
function repaire×××(){
echo "begin to repaire ×××";
mknod /dev/ppp c 108 0
service iptables restart
service pptpd start
}
function add×××user(){
echo "input user name:"
read username
echo "input password:"
read userpassword
echo "${username} pptpd ${userpassword} *" >> /etc/ppp/chap-secrets
service iptables restart
service pptpd start
}
echo "which do you want to?input the number."
echo "1. install ××× service"
echo "2. repaire ××× service"
echo "3. add ××× user"
read num
case "$num" in
[1] ) (install×××);;
[2] ) (repaire×××);;
[3] ) (add×××user);;
*) echo "nothing,exit";;
esac
此脚本来自其他博友，当时没记下链接，谢谢了。