centos 7 搭建 l2tp debian 搭建 l2tp

请参考链接： https://programmersought.com/article/79624095048/

一键安装脚本，请参考

wget https://git.io/vpnsetup-centos -O vpnsetup.sh && sudo sh vpnsetup.sh

git.io网络不通，centos 7 8 请使用wget http://download.zhufunin.com/l2tp/vpnsetup-centos -O vpnsetup.sh && sudo sh vpnsetup.sh
ubuntu 使用wget http://download.zhufunin.com/l2tp/vpnsetup-ubuntu -O vpnsetup.sh && sudo sh vpnsetup.sh

ubuntu上的l2tp安装教程，请参考 https://linuxscriptshub.com/configure-l2tp-ipsec-vpn-ubuntu-1604/

1） 设置共享密钥的配置文件：/etc/ipsec.secrets
2） 设置用户名和密码的配置文件：/etc/ppp/chap-secrets

服务重启的命令

service ipsec restart
service xl2tpd restart

以下为设置radius MySQL方式认证登录

https://linuxscriptshub.com/authenticate-l2tp-ipsec-freeradius/

docker 容器搭建l2tp

docker官方地址安装 （海外服务器）

yum remove docker-common -y
cd /etc/yum.repos.d/ 
wget https://download.docker.com/linux/centos/docker-ce.repo
yum -y install docker-ce 
systemctl enable docker
systemctl start docker

阿里地址安装 （国内服务器）

cd /etc/yum.repos.d/
wget http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum -y install docker-ce 
systemctl enable docker
systemctl start docker

docker-compose 安装

curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" \
-o  /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

安装了docker和docker-compose后， 以下是 l2tp docker 安装方式的复制粘贴 脚本

mkdir ipsec-vpn-server
cd ipsec-vpn-server
mkdir ikev2-vpn-data
cat << "EOF" > vpn.env
VPN_IPSEC_PSK=xxxxxx
VPN_USER=xxxxxx
VPN_PASSWORD=xxxx
VPN_ADDL_USERS=test test02
VPN_ADDL_PASSWORDS=test test02
#VPN_SERVER_IP=x.x.x.x
EOF

cat << "EOF" > docker-compose.yaml
version: "2.3"
services:
  l2tp-vpn-server:
    container_name: l2tp-vpn-server
    image: hwdsl2/ipsec-vpn-server:debian
    privileged: true
    env_file:
    - vpn.env
    volumes:
    - ./ikev2-vpn-data:/etc/ipsec.d
    - /lib/modules:/lib/modules:ro
    restart: always
    ports:
    - 500:500/udp
    - 4500:4500/udp
EOF

cat << "EOF" > restart-with-build.sh
#!/bin/bash

BASE_PATH=$(cd $(dirname $0); pwd)
cd ${BASE_PATH}
docker-compose down
docker-compose up --build -d
EOF

chmod 755 restart-with-build.sh
ls 
#如下命令启动
./restart-with-build.sh

参考截图