本文系统Centos6.0；192.168.182.133
本文也是近期项目之一；为了后面的vpn隧道和多ip路由分流；
-rw-r--r-- 1 root root 684342 6月 19 22:49 ppp-2.4.5.tar.gz -rw-r--r-- 1 root root 74048 6月 19 22:49 pptpd-1.3.4-2.el6.i686.rpm
这是其中的两个包；
如果pptpd不好下载的话，欢迎到本人下载区去下载，因为这个国外的url被和谐了，本人也是使用了加速器才下载到的；http://down.51cto.com/data/840850
1、下面就开始操作了；
[root@node1 ~]# vim /etc/pptpd.conf #pptpd.conf option /etc/ppp/options.pptpd logwtmp localip 192.168.182.133 remoteip 172.16.0.2-254
[root@node1 ~]# vim /etc/ppp/options.pptpd name pptpd refuse-pap refuse-chap refuse-mschap require-mschap-v2 require-mppe-128 proxyarp lock nobsdcomp novj novjccomp nologfd ms-dns 8.8.8.8 logfile /var/log/pptpd.log
[root@node1 ~]# vim /etc/ppp/chap-secrets # Secrets for authentication using CHAP # client server secret IP addresses test pptpd test123 *
[root@node1 ~]# cat /etc/sysctl.conf |grep -v ^# |grep -v ^# net.ipv4.ip_forward = 1
[root@node1 ~]# iptables -t nat -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE
Ps；重启服务；测试本地拨号是否正常；
经过测试，拨号OK；
2、下面是安装mysql及freeradius;
yum install mysql* freeradius* -y
创建radius数据库，导入相关sql；并创建测试用户；
mysql> create database radius;
[root@node1 ~]# mysql -u root -p radius < /etc/raddb/sql/mysql/admin.sql [root@node1 ~]# mysql -u root -p radius < /etc/raddb/sql/mysql/cui.sql [root@node1 ~]# mysql -u root -p radius < /etc/raddb/sql/mysql/nas.sql [root@node1 ~]# mysql -u root -p radius < /etc/raddb/sql/mysql/schema.sql [root@node1 ~]# mysql -u root -p radius < /etc/raddb/sql/mysql/wimax.sql
mysql> insert into radius.radcheck (Username,Attribute,op,Value) values('lansgg','password','==','lansgg123')配置radius的相关配置文件；
[root@node1 ~]# vim /etc/raddb/radiusd.conf 700 $INCLUDE sql.conf
[root@node1 ~]# vim /etc/raddb/sql.conf
28 database = "mysql"
33 driver = "rlm_sql_${database}"
36 server = "localhost"
38 login = "root"
39 password = "123"
42 radius_db = "radius"
50 acct_table1 = "radacct"
51 acct_table2 = "radacct"
100 readclients = yes
ps:前面的子标为行数哈[root@node1 ~]# vim /etc/raddb/sites-enabled/default
69 authorize {
170 # files
177 sql
252 authenticate {
297 # unix
333 preacct {
372 # files
389 # unix
406 sql
449 session {
454 sql
461 post-auth {
475 sql[root@node1 ~]# vim /etc/raddb/sites-enabled/inner-tunnel 124 # files 131 sql 223 # unix 255 sql 277 sql
[root@node1 ~]# vim /etc/raddb/eap.conf 30 default_eap_type = peap
测试radius和mysql的整合
3、下面是pptpd和freeradius的整合了；
解压ppp源码包，copy其配置文件；
[root@node1 ~]# tar zxvf ppp-2.4.5.tar.gz
[root@node1 ~]# mkdir /etc/ppp/radius [root@node1 ~]# cp -R ppp-2.4.5/pppd/plugins/radius/etc/ /etc/ppp/radius/
修改radius的相关路径：
[root@node1 etc]# vim radiusclient.conf auth_order radius login_tries 4 login_timeout 60 nologin /etc/nologin issue /etc/ppp//radius/etc/issue authserver localhost:1812 acctserver localhost:1813 servers /etc/ppp/radius/etc/servers dictionary /etc/ppp/radius/etc/dictionary login_radius /usr/local/sbin/login.radius seqfile /var/run/radius.seq mapfile /etc/ppp/radius/etc/port-id-map default_realm radius_timeout 10 radius_retries 3 login_local /bin/login
[root@node1 etc]# vim /etc/ppp/radius/etc/dictionary INCLUDE /etc/ppp/radius/etc/dictionary.microsoft INCLUDE /etc/ppp/radius/etc/dictionary.ascend #新增 INCLUDE /etc/ppp/radius/etc/dictionary.merit #新增 INCLUDE /etc/ppp/radius/etc/dictionary.compat #新增
增加options.pptpd
[root@node1 etc]# vim /etc/ppp/options.pptpd plugin /usr/lib/pppd/2.4.5/radius.so #新增 radius-config-file /etc/ppp/radius/etc/radiusclient.conf #新增
修改radius认证密钥；
[root@node1 raddb]# vim /etc/raddb/clients.conf 101 secret = lansggtest
[root@node1 raddb]# vim /etc/ppp/radius/etc/servers 5 localhost lansggtest
经过测试OK！（帐号:lansgg；密码lansgg123）
