Files
2018-11-15 18:06:53 +08:00

532 lines
19 KiB
HTML

<!doctype html>
<html class="no-js" lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="author" content="Lednerb">
<meta name="description" content="Bilberry Premium Theme for Hugo.">
<meta name="keywords" content="blog,personal,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
<meta name="generator" content="Hugo 0.50" />
<title> [筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server | My cool new Blog</title>
<meta name="description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta itemprop="name" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server">
<meta itemprop="description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta property="og:title" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server">
<meta property="og:description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta property="og:image" content="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?size=200">
<meta property="og:url" content="https://h.cowbay.org/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">
<meta property="og:site_name" content="My cool new Blog">
<meta property="og:type" content="article">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.717098cb5503581e75f12e486a847ca410bf8367d4d8713f4c37affc868c5a1d.css">
</head>
<body class="bilberry-hugo-theme">
<nav>
<div class="container">
<ul class="topnav">
<li><a href="/page/about-bilberry/">About Bilberry</a></li>
<li><a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Github</a></li>
</ul>
<div id="search-box" class="search">
<i class="fa fa-search"></i>
<input id="search" type="text" placeholder="Search ...">
</div>
</div>
</nav>
<header>
<div class="container">
<div class="logo">
<a href="/" class="logo">
<img src="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?d=mm&size=200" alt="">
<span class="overlay"><i class="fa fa-home"></i></span>
</a>
</div>
<div class="titles">
<h3 class="title"><a href="/">My cool new Blog</a></h3>
<span class="subtitle">Hello World! This is the most epic subtitle ever.</span>
</div>
<div class="languages">
<a href="/en" class="active">en</a>
<a href="/de">de</a>
</div>
<div class="toggler">
<i class="fa fa-bars" aria-hidden="true"></i>
</div>
</div>
</header>
<div class="main container">
<div class="article-wrapper u-cf single">
<a class="bubble" href="/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="content">
<h3><a href="/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server</a></h3>
<div class="meta">
<span class="date moment">2015-03-16</span>
<span class="categories">
<a href="/categories/%E5%B7%A5%E4%BD%9C%E7%AD%86%E8%A8%98">工作筆記</a>
</span>
</div>
<p>其實都是看人家整好的筆記&hellip;</p>
<p>參考這篇</p>
<h3 id="freebsd使用mpd5架設vpn-pptp協定-http-gp671112-blogspot-tw-2014-07-freebsdmpd5vpnpptp-html"><a href="http://gp671112.blogspot.tw/2014/07/freebsdmpd5vpnpptp.html">FreeBSD使用MPD5架設VPN(PPTP協定)</a></h3>
<p>還有 這篇</p>
<h2 id="install-mpd5-pptp-server-on-freebsd-9-2-and-freebsd10-https-www-netroby-com-view-php-id-3598"><a href="https://www.netroby.com/view.php?id=3598">Install mpd5 pptp server on FreeBSD 9.2 and FreeBSD10</a></h2>
<p></p>
<p>&nbsp;</p>
<p>複製一個 mpd.conf
<pre class="codeblock">cp /usr/local/etc/mpd5/mpd.conf.sample mpd.conf</p>
<p>編輯
vim /usr/local/etc/mpd5/mpd.conf</pre>
&gt; <pre class="prettyprint lang-bsh"><span class="pln">startup</span><span class="pun">:</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> user netroby password admin
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> console self </span><span class="lit">127.0</span><span class="pun">.</span><span class="lit">0.1</span> <span class="lit">5005</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> console open
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> web self </span><span class="lit">0.0</span><span class="pun">.</span><span class="lit">0.0</span> <span class="lit">5006</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> web open
&gt;
&gt; default</span><span class="pun">:</span><span class="pln">
&gt;
&gt; load pptp_server
&gt;
&gt; pptp_server</span><span class="pun">:</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ippool add pool1 </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.50</span> <span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.99</span><span class="pln">
&gt;
&gt; create bundle template B
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface enable proxy</span><span class="pun">-</span><span class="pln">arp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface idle </span><span class="lit">1800</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> iface enable tcpmssfix
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface route </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp yes vjcomp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ipcp ranges </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span><span class="pun">/</span><span class="lit">32</span><span class="pln"> ippool pool1
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ipcp dns </span><span class="lit">8.8.8.8 &lt;&mdash;改成 google DNS</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp dns </span><span class="lit">8.8.4.4</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp nbns </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> bundle enable compression
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ccp yes mppc
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes e40
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes e128
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes stateless
&gt;
&gt; create link template L pptp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link fsm</span><span class="pun">-</span><span class="pln">timeout </span><span class="lit">5</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link action bundle B
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link enable multilink
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link yes acfcomp protocomp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link no pap chap eap chap</span><span class="pun">-</span><span class="pln">msv2
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link enable chap chap</span><span class="pun">-</span><span class="pln">msv2 eap
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link accept chap</span><span class="pun">-</span><span class="pln">msv2
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link keep</span><span class="pun">-</span><span class="pln">alive </span><span class="lit">10</span> <span class="lit">60</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link mtu </span><span class="lit">1460</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> pptp self </span><span class="lit">your_ip_address &lt;&ndash;改成伺服器的WAN IP</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link enable incoming</span></pre>
<pre class="codeblock">
vim /etc/pf.conf</pre>
&gt; <pre class="prettyprint lang-bsh"><span class="pln">my_int </span><span class="pun">=</span> <span class="str">&ldquo;vtnet0&rdquo;</span><span class="pln">
&gt;
&gt; internal_net </span><span class="pun">=</span> <span class="str">&ldquo;192.168.0.0/16&rdquo;</span><span class="pln">
&gt;
&gt; external_addr </span><span class="pun">=</span> <span class="str">&ldquo;your_ip_addr</span><span class="str">&rdquo; &lt;&ndash;改成伺服器的 WAN IP</span><span class="pln">
&gt;
&gt; nat on $my_int from $internal_net to any </span><span class="pun">-&gt;</span><span class="pln"> $external_addr
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> skip on lo
&gt;
&gt; block </span><span class="kwd">in</span><span class="pln"> log all
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">1723</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">22</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">80</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">443</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> quick on $my_int proto icmp all keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> proto gre all keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> from any to $internal_net
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> from $internal_net to any
&gt;
&gt; pass out proto </span><span class="pun">{</span><span class="pln"> gre</span><span class="pun">,</span><span class="pln"> tcp</span><span class="pun">,</span><span class="pln"> udp</span><span class="pun">,</span><span class="pln"> icmp </span><span class="pun">}</span><span class="pln"> all keep state
&gt;
&gt; </span></pre>
<pre class="codeblock">
service pf restart 現有的 SSH會中斷 要重連
重開 pietty 測試連線OK之後,開IPHONE來連 VPN確認正常,可是速度很糟糕..
要拿來看片,我想應該是不可能了&hellip;</p>
<p>改天再來測試 Linode / Vultr 的 VPS吧..</p>
<p></pre>
&nbsp;</p>
<p>&nbsp;</p>
</div>
<div class="footer no-tags">
</div>
</article>
</div>
<div id="disqus_thread"></div>
<script type="application/javascript">
var disqus_config = function () {
};
(function() {
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
return;
}
var d = document, s = d.createElement('script'); s.async = true;
s.src = '//' + "bilberry-hugo-theme" + '.disqus.com/embed.js';
s.setAttribute('data-timestamp', +new Date());
(d.head || d.body).appendChild(s);
})();
</script>
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
</div>
<footer>
<div class="container">
<div class="recent-posts">
<strong>Latest posts</strong>
<ul>
<li>
<a href="/article/google-550-5-7-1-sloution/">寄信給google被退信 錯誤 550-5.7.1的解法</a>
</li>
<li>
<a href="/article/netdata-linux-system-performance-monitor-dashboard/">Netdata Linux System Performance Monitor Dashboard</a>
</li>
<li>
<a href="/article/linux-performance-monitor-dashboard-netdata-md/">Linux 底下極其詳細的System performace Monitor Dashboard - Netdata</a>
</li>
<li>
<a href="/article/syntax-test/">Syntax Test</a>
</li>
<li>
<a href="/article/psql-create-role-and-assign-priviledges/">psql create role and assign priviledges</a>
</li>
<li>
<a href="/article/study-url/">Study URL</a>
</li>
<li>
<a href="/article/rsync-time-backup/">[筆記] Linux 底下好用的備份工具 rsync-time-backup</a>
</li>
</ul>
</div>
<div class="categories">
<a href="/categories/"><strong>Categories</strong></a>
<ul>
<li>
<a href="/categories/%E6%9C%AA%E5%88%86%E9%A1%9E">未分類 (86)</a>
</li>
<li>
<a href="/categories/%E5%B7%A5%E4%BD%9C%E7%AD%86%E8%A8%98">工作筆記 (68)</a>
</li>
<li>
<a href="/categories/%E5%85%B6%E4%BB%96">其他 (46)</a>
</li>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (30)</a>
</li>
<li>
<a href="/categories/%E5%89%AA%E5%A0%B1">剪報 (18)</a>
</li>
<li>
<a href="/categories/starting">Starting (5)</a>
</li>
<li>
<a href="/categories/blog">Blog (4)</a>
</li>
</ul>
</div>
<div class="right">
<div class="external-profiles">
<strong>Social media</strong>
<a href="https://twitter.com/TheRealLednerb" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
<a href="https://github.com/Lednerb" target="_blank"><i class="fa fa-github"></i></a>
</div>
<div class="languages">
<strong>Other languages</strong>
<a href="/en" class="active">en</a>
<a href="/de">de</a>
</div>
</div>
</div>
</footer>
<div class="credits">
<div class="container">
<div class="copyright">
<a href="https://github.com/Lednerb" target="_blank">
&copy;
2017
by Lednerb
</a>
</div>
<div class="author">
<a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Bilberry Hugo Theme</a>
</div>
</div>
</div>
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR&#43;EOJB6uKUez/iGAnFcg=="></script>
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
<script>
$(".moment").each(function() {
$(this).text(
moment( $(this).text() )
.locale( "en" )
.format('LL')
);
});
$(".footnote-return sup").html("");
</script>
<script>
var client = algoliasearch("Y2C4RWMPXW", "50ea7f8c41c0ad233926e0be2b769ed1");
var index = client.initIndex("default-content");
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
[
{
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 5, filters: 'language: en' }),
displayKey: function(suggestion) {
return suggestion.title || suggestion.author
},
templates: {
suggestion: function(suggestion) {
return "<span class='entry " + suggestion.type + "'>"
+ "<span class='title'>" + suggestion.title + "</span>"
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
+ "</span>"
;
},
empty: function() {
return "<span class='empty'>Nothing found.</span>"
},
footer: function() {
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
}
},
}
])
.on('autocomplete:selected', function(event, suggestion, dataset) {
window.location = (suggestion.url);
})
.keypress(function (event, suggestion) {
if (event.which == 13) {
window.location = (suggestion.url);
}
});
</script>
</body>
</html>