Centos7 搭建IPSEC上的L2TP服务器.pdf

CENTOS 7RHEL 7 LINUX IPSEC XL2TPD VPN CENTOS 7 IPSEC XL2TPD VPN VPN LINUXLINUXVPNPPTPL2TPOPENVPN linuxcentos7/rhel7l2tpd xl2tpdl2tplibreswanipseccentos7 ipsec libreswanopenswan [root@]#yum install xl2tpd [root@]#yum install libreswan linux linuxipsec centos7 1ipsec [root@]#vi /etc/ipsec.conf # /etc/ipsec.conf - Libreswan IPsec configuration file # This file: /etc/ipsec.conf # # Enable when using this configuration file with openswan instead of libres wan #version 2 # # Manual: ipsec.conf.5 # basic configuration config setup # which IPsec stack to use, netkey (the default), klips or mast. # For MacOSX use bsd protostack=netkey # # Normally, pluto logs via syslog. If you want to log to a file, # specify below or to disable logging, eg for embedded systems, use # the file name /dev/null # Note: SElinux policies might prevent pluto writing to a log file at # an unusual location. #logfile=/var/log/pluto.log # # The interfaces= line is only required for the klips/mast stack #interfaces=%defaultroute #interfaces=ipsec0=eth0 ipsec1=ppp0 # # If you want to limit listening on a single IP - not required for # normal operation #listen= # # Do not set debug options to debug configuration issues! # # plutodebug / klipsdebug = all, none or a combation from below: # raw crypt parsing emitting control kernel pfkey natt x509 dpd # private. # Note: crypt is not included with all, as it can show confidential # information. It must be specifically specified # examples: # plutodebug=control parsing # plutodebug=all crypt # Again: only enable plutodebug or klipsdebug when asked by a developer #plutodebug=none #klipsdebug=none # # Enable core dumps (might require system changes, like ulimit -C) # This is required for abrtd to work properly