如何使用CentOS 7实例配置PPTP VPN服务端到客户端的连接_云服务器 ECS-阿里云帮助中心

背景信息

点对点隧道协议（PPTP）是建立在PPP（Point to Point）点对点协议上的VPN隧道技术。当远程用户要访问公司专用网时，可采用PPTP网络接入方式，用户先拨号到PPTP Server建立PPP连接，然后通过PPTP协商建立一条用户到服务器的“隧道”，接着通过PPP协议的NCP协商，为用户分配一个网段内IP，用户可以使用分配到的IP进行局域网内的通信。从而为远程接入虚拟专用网提供一条在公共网络上创建安全连接的途径。

```
yum install -y ppp pptpd
```
1. ```
#localip 192.168.0.1
#remoteip 192.168.0.234-238,192.168.0.245
```
2. ```
#ms-dns 10.0.0.1
#ms-dns 10.0.0.2
ms-dns 223.5.5.5
ms-dns 223.6.6.6
```
4. ```
/etc/ppp/ip-up. ipv6to4 ${LOGDEVICE}
[ -x /etc/ppp/ip-up.local ] && /etc/ppp/ip-up.local “$@”
ifconfig ppp0 mtu 1472
```
1. ```
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
```
2. ```
iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -j SNAT --to-source XXX.XXX.XXX.XXX
```
3. ```
service iptables save
```
  - ```
  iptables: Saving firewall rules to /etc/sysconfig/iptables:[  OK  ]
```
- ```
The service command supports only basic LSB actions (start, stop, restart, try-restart, reload, force-reload, status). For other actions, please try to use systemctl.
```
1. ```
systemctl stop firewalld
systemctl mask firewalld
```
2. ```
yum install iptables-services
```
3. ```
systemctl enable iptables
```
4. ```
systemctl restart iptables
```

```
systemctl restart pptpd
```
```
systemctl start iptables
```

systemctl enable pptpd.service
systemctl enable iptables.service

```
yum install -y ppp pptp pptp-setup
```
```
pptpsetup --create test --server [$IP] --username [$User] --password [$Password] --encrypt --start
```
```
ifconfig | grep -A 10 ppp
```
```
ip route replace default dev ppp0
```