Make sure you get a message saying that the VPN connection was successful, then browse to an IP checking website to verify that your IP now shows up as the server's IP. You can now test the VPN connection by going to the Network Manager applet → VPN Connections and selecting the connection that you just created. Disable the use of MSCHAP authentication (leave MSCHAPv2 enabled).įinally, click Ok and then Save to close out the previous window. In this window, enable "Use Point-to-Point encryption (MPPE)" and select 128-bit security. In this window, enter your server's hostname or IP along with the username and key that you added to the /etc/ppp/chap-secrets file on the server. On the next screen select PPTP for the VPN type, then click Create. In the Network Manager applet, select VPN Connections → Configure VPN, then click Add. KEY=`head -c 20 /dev/urandom | sha1sum | nawk ''`Įcho "$USER pptpd $KEY *" | sudo tee -a /etc/ppp/chap-secrets Replace $USER with the actual username you want to use for that VPN user. If you have a firewall on the server, such as UFW, consult the relevant documentation instead.įourth, for each VPN user, create an account in the file /etc/ppp/chap-secrets. Note: This guide assumes you have no firewall configured on the server. # Enable NAT on boot from the rc.local script.ĬMD="iptables -table nat -append POSTROUTING -out-interface $OUTIF -jump MASQUERADE" Sudo -i iptables -table nat -append POSTROUTING -out-interface $OUTIF -jump MASQUERADE Third, enable NAT (if it isn't enabled already) so that users on the private VPN network can have their packets routed out to the internet: OUTIF=`/sbin/ip route show to exact 0/0 | sed -r 's/.*dev\s+(\S+).*/\1/'` # Reload the config file to have the change take effect immediately. Second, enable ip_forward in the kernel for IPv4 by uncommenting the associated line in /etc/nf: sudo sed -i -r 's/^\s*#(net\.ipv4\.ip_forward=1.*)/\1/' /etc/nf
As always, consult the full documentation to understand what everything is doing.įirst, install the required software: sudo apt-get install pptpd
Clients will then be able to VPN into the server and route their internet traffic so that it goes through the server to the internet. What follows are the absolute minimum instructions that you need to get a basic PPTP VPN server running under Ubuntu.
0 kommentar(er)
