/home/user/vpn-on
#!/bin/bash
#vpn-on
#
sudo route add -host x.x.191.13 gw 10.10.32.1
sudo route del default
sudo pon vpn
sleep 10
sudo route add default dev ppp0
echo "VPN is UP !"
sleep 5
/home/user/vpn-off
#!/bin/bash
#vpn-off
#
ifconfig eth0 | grep "RX bytes"
sudo poff vpn
sleep 10
sudo route del -host x.x.191.13 gw 10.10.32.1
sudo route add default gw 10.10.32.1
echo "VPN is DOWN !"
sleep 2
/etc/ppp/peers/vpn
maxfail 0
lcp-echo-interval 60
lcp-echo-failure 4
pty "pptp x.x.191.13 --nolaunchpppd"
name testuser1
remotename Cisco_VPN_PPTP_server
usepeerdns
+chap
file /etc/ppp/options.pptp
ipparam vpn
/etc/ppp/options.pptp
###############################################################################
# $Id: options.pptp,v 1.1 2005/02/18 01:40:23 quozl Exp $
#
# Sample PPTP PPP options file /etc/ppp/options.pptp
# Options used by PPP when a connection is made by a PPTP client.
# This file can be referred to by an /etc/ppp/peers file for the tunnel.
# Changes are effective on the next connection. See "man pppd".
#
# You are expected to change this file to suit your system. As
# packaged, it requires PPP 2.4.2 or later from http://ppp.samba.org/
# and the kernel MPPE module available from the CVS repository also on
# http://ppp.samba.org/, which is packaged for DKMS as kernel_ppp_mppe.
###############################################################################
# Lock the port
lock
# Authentication
# We don't need the tunnel server to authenticate itself
noauth
# We won't do EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
refuse-eap
refuse-chap
refuse-mschap
# Compression
# Turn off compression protocols we know won't be used
nobsdcomp
nodeflate
persist
# Encryption
# (There have been multiple versions of PPP with encryption support,
# choose with of the following sections you will use. Note that MPPE
# requires the use of MSCHAP-V2 during authentication)
# http://ppp.samba.org/ the PPP project version of PPP by Paul Mackarras
# ppp-2.4.2 or later with MPPE only, kernel module ppp_mppe.o
# {{{
# Require MPPE 128-bit encryption
require-mppe-128
# }}}
# http://polbox.com/h/hs001/ fork from PPP project by Jan Dubiec
# ppp-2.4.2 or later with MPPE and MPPC, kernel module ppp_mppe_mppc.o
# {{{
# Require MPPE 128-bit encryption
#mppe required,stateless
# }}}
/etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client server secret IP addresses
testuser1 * 1234 *
/etc/ppp/resolv.conf
nameserver 192.168.100.254
nameserver x.x.191.18
P.S. для того, чтобы pptp работал в Ubuntu 8.04 нужно поставить пакет pptp-linux.
sudo apt-get install pptp-linux
Комментариев нет:
Отправить комментарий