一 使用一键脚本搭建L2TP+IPSec
wget --no-check-certificate https://raw.githubusercontent.com/teddysun/across/master/l2tp.sh
chmod +x l2tp.sh
./l2tp.sh
二 操作
l2tp -a : 增加一个连接账户
l2tp -d : 删除一个连接账户
l2tp -l : 展示现有的账户
l2tp -m : 修改账户的密码
三 手动添加 账号绑定ip
vim /etc/ppp/chap-secrets
路由器功能拓展
注意事项
centos6.8中要做防火墙端口映射并关闭防火墙配置中POSTROUTING 中NAT模式（有的没有不用管） 否则无法上网
centos6.8 防火墙配置 /etc/sysconfig/iptables
iptables -t nat -A POSTROUTING -s 192.168.18.0/24 -o eth0 -j MASQUERADE
服务器脚本
#!/bin/bash
source /etc/profile
IFCONIFGPPP=`ifconfig | sed -En 's/127.0.0.1//;s/.*destination (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p'`
#arry_list1=(`echo $IFCONIFGPPP | tr ' ' ' '`)
DATE=$(date "+%Y-%m-%d %H:%M:%S")
#arry_list2=("192.168.18.4" "192.168.18.5" "192.168.18.6" "192.168.18.7" "192.168.18.8" "192.168.18.9" "192.168.18.10" "192.168.18.11")
arry_list1=("192.168.18.2" "192.168.18.3" "192.168.18.4" "192.168.18.5" "192.168.18.6" "192.168.18.7" "192.168.18.8" "192.168.18.9" "192.168.18.10" "192.168.18.11")
arry_list2=(`echo $IFCONIFGPPP | tr ' ' ' '`)
declare -a diff_list
t=0
flag=0
#echo arry_list1=${arry_list1[@]}
#echo arry_list2=${arry_list2[@]}
for list1_num in "${arry_list1[@]}"
do
#echo list1_num is ${list1_num}
for list2_num in "${arry_list2[@]}"
do
#echo list2_num is ${list2_num}
if [[ "${list1_num}" == "${list2_num}" ]]; then
flag=1
break
fi
done
if [[ $flag -eq 0 ]]; then
diff_list[t]=$list1_num
t=$((t+1))
else
flag=0
fi
done
num=${#diff_list[@]}
if [ $num -gt 0 ];then
for diff_list in "${diff_list[@]}"
do
echo ${diff_list[i]} $DATE>>/udplog/udp.log
#echo ${diff_list[i]}
done
fi
路由器脚本
#!/bin/sh
`mkdir -p /root/home`
echo "#!/bin/sh
#DATE=`date +%Y-%m-%d-%H:%M:%S`
tries=0
echo --- my_watchdog start --
while [[ "$""tries" -lt 5 ]]
do
if /bin/ping -c 1 114.114.114.114 >/dev/null
then
echo --- exit --
exit 0
fi
tries=$((tries+1))
sleep 10
done
#echo $DATE reboot >>my_watchdog.log
echo reboot" >> /root/home/watchdog.sh
`crontab -r`
echo "*/5 * * * * sh /root/home/watchdog.sh" >>/var/spool/cron/crontabs/root
`/etc/init.d/cron restart`
查看连接数
Centos7.3: ifconfig | sed -En 's/127.0.0.1//;s/.*destination (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p'
Centos6.8: ifconfig | grep -w P-t-P | cut -c 41-54
