{"id":637,"date":"2024-05-07T21:52:51","date_gmt":"2024-05-07T13:52:51","guid":{"rendered":"https:\/\/www.xudongvp.com\/?p=637"},"modified":"2024-05-10T22:18:54","modified_gmt":"2024-05-10T14:18:54","slug":"%e5%a4%9a%e4%ba%91%e7%bb%84%e7%bd%91","status":"publish","type":"post","link":"https:\/\/www.xudongvp.com\/?p=637","title":{"rendered":"\u591a\u4e91\u7ec4\u7f51\u7b2c\u4e00\u7bc7\uff1a\u521d\u59cb\u642d\u5efaVPN-WAN\u7ed3\u6784"},"content":{"rendered":"\n

\u5404\u4e2a\u516c\u6709\u4e91\u7684\u670d\u52a1\u5668\u5f00\u59cb\u6253\u6298\u554a\uff0c\u963f\u91cc\u4e9199\u5143\u4e00\u5e742C2G3M\u56fa\u5b9a\u5e26\u5bbd\uff0c\u817e\u8baf\u4e9199\u5143\u4e00\u5e742C2G4M\u5e26\u5bbd\uff08\u4f46\u662f\u6709\u6bcf\u6708300GB\u6d41\u91cf\u9650\u5236\uff09\uff0c\u867d\u7136\u6211\u559c\u6b22\u534e\u4e3a\u4e91\uff0c\u4f46\u8010\u4e0d\u4f4f\u534e\u4e3a\u4e91\u5b9e\u5728\u662f\u4e0d\u7ed9\u4f18\u60e0\u554a\u3002\u4e0d\u8fc7\u6211\u4e91\u670d\u52a1\u5668\u7eed\u8d39\u7eed\u5230\u4e862026\u5e74\u4e86\u3002\u5f00\u901a\u4e24\u4e2a\u65b0\u8282\u70b9\u5427\uff0c\u8bf4\u4e0d\u5b9a\u540e\u9762\u5e72\u5565\u4f1a\u7528\u4e0a\u3002<\/p>\n\n\n\n

\u8fd9\u6837\u7684\u8bdd\uff0c\u52a0\u4e0a\u676d\u5dde\u548c\u4e0a\u6d77\u4e24\u4e2a\u81ea\u5df1\u7684\u5185\u7f51\u8282\u70b9\uff0c\u5c31\u6709\u4e94\u4e2a\u533a\u57df\u4e86\uff0c\u5c1d\u8bd5\u4e0b\u591a\u4e91\u7ec4\u7f51\uff1f\u8bf4\u5e72\u5c31\u5e72\u5427\u3002\u5148\u89c4\u5212\u4e00\u4e0b\u7f51\u7edc\u5206\u6bb5\u548c\u8282\u70b9\u804c\u80fd\uff0c\u8003\u8651\u5230\u540e\u7eed\u6709\u53ef\u80fd\u8bb2\u6240\u6709\u7684\u8282\u70b9\u7684\u5b50\u7f51\u8fde\u63a5\u6210\u4e00\u4e2a\u5927\u5185\u7f51\uff0c\u6240\u4ee5\u5404\u4e2a\u7f51\u6bb5\u5fc5\u987b\u4e0d\u80fd\u51b2\u7a81\u3002<\/p>\n\n\n\n

\u676d\u5dde\u5bb6\u91cc\uff0c\u4e3a\u4e86\u51cf\u5c11\u7ed9\u666e\u901a\u8bbe\u5907\u5e26\u6765\u7684\u56f0\u6270\uff0c\u5c31\u7528\u8def\u7531\u5668\u666e\u904d\u9ed8\u8ba4\u7684192.168.0.0\u7684\u7f51\u6bb5\uff0c\u5176\u4ed6\u51e0\u4e2a\u8282\u70b9\u8fdb\u884c\u5206\u6bb5\u3002<\/p>\n\n\n\n

\u8fd9\u91cc\u8bf4\u4e00\u4e2a\u63d2\u66f2\uff0c\u628a\u963f\u91cc\u4e91\u548c\u817e\u8baf\u4e91\u7684\u6253\u6298\u670d\u52a1\u5668\u4e70\u5b8c\uff0c\u53d1\u73b0\u817e\u8baf\u4e91\u6709\u732b\u817b\uff0c\u4e0d\u4ec5\u4ec5\u662f\u6d41\u91cf\u9650\u5236\u4e86\u6bcf\u6708300GB\uff08\u867d\u7136\u6211\u7528\u4e0d\u5b8c\uff09\uff0c\u800c\u4e14\u529f\u80fd\u7f29\u51cf\u4e86\u4e0d\u5c11\uff0c\u6bd4\u5982IP\u5730\u5740\u4e0d\u5141\u8bb8\u53d8\u66f4\u3002\u963f\u91cc\u4e91\u548c\u534e\u4e3a\u4e91\u90fd\u662f\u53ef\u4ee5\u81ea\u5df1\u53d8\u66f4\u5185\u7f51\u7f51\u6bb5\u548cIP\u5730\u5740\u7684\u3002\u6240\u4ee5\u817e\u8baf\u4e91\u7684IP\u5730\u5740\uff0c\u5c31\u662f\u4e70\u6765\u662f\u5565\u6211\u5c31\u7528\u5565\u4e86\uff0c\u4ed6\u8fd8\u6d41\u91cf\u53d7\u9650\u3002<\/p>\n\n\n\n

\u90a3\u90a3\u4ed6\u5f53VPN SERVER\u5427\uff0c\u4ee5\u540e\u4e3b\u5165\u53e3\u767b\u5f55\u5c31\u4ece\u4ed6\u8fd9\u91cc\u767b\u5f55\u4e86\u3002\u6211\u81ea\u5df1\u6298\u817e\uff0c300GB\u591f\u4e86\uff0c\u53c8\u4e0d\u5bf9\u5916\u670d\u52a1\u3002\u4e8e\u662f\uff0c\u5c31\u6709\u4e86\u5982\u4e0b\u7684\u7f51\u7edc\u5212\u5206\u548c\u89c4\u5212\u8868\u3002<\/p>\n\n\n\n

\u533a\u57df<\/strong><\/td>\u5185\u7f51<\/strong>IP<\/td>\u804c\u80fd<\/strong><\/td>VPN-IP<\/strong><\/td>\u5907\u6ce8<\/strong><\/td><\/tr>
\u534e\u4e3a\u4e91-\u4e0a\u6d77<\/td>192.168.20.21<\/td>\u5916\u7f51\u4e3b\u8282\u70b9<\/td>192.168.42.101<\/td><\/td><\/tr>
\u963f\u91cc\u4e91-\u676d\u5dde<\/td>192.168.21.0<\/td>\u5916\u7f51\u8f85\u8282\u70b9<\/td>192.168.42.102<\/td><\/td><\/tr>
\u817e\u8baf\u4e91-\u5e7f\u5dde<\/td>10.1.12.4<\/td>VPN SERVER\u5165\u53e3<\/td>192.168.42.1<\/td><\/td><\/tr>
\u676d\u5dde\u673a\u623f<\/td>192.168.0.0<\/td>\u4e3b\u673a\u623f<\/td>192.168.42.103<\/td>NAS\u5b58\u50a8\uff0c\u535a\u5ba2\u670d\u52a1\u5668<\/td><\/tr>
\u4e0a\u6d77\u673a\u623f<\/td>192.168.10.0<\/td>\u8f85\u673a\u623f<\/td>192.168.42.104<\/td>PC SERVER\u8ba1\u7b97\u8d44\u6e90\u6c60<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u7136\u540e\u6211\u4eec\u662f\u8fd9\u6837\u6253\u7b97\u7684\uff0c\u817e\u8baf\u4e91\u5e7f\u5dde\u8282\u70b9\u4f5c\u4e3aVPN-SERVER\uff0c\u5176\u4ed6\u8282\u70b9\u4f5c\u4e3aCLIENT\uff0c\u90fd\u62e8\u5165\u5230\u817e\u8baf\u4e91\u8282\u70b9\u3002\u8fd9\u6837\u4ee5\u540e\uff0c\u6211\u81ea\u5df1\u7684\u7b14\u8bb0\u672c\uff0c\u901a\u8fc7VPN\u4e5f\u62e8\u5165\u5230\u817e\u8baf\u4e91\u5e7f\u5dde\u8282\u70b9\uff0c\u5c31\u6210\u4e3a\u5927\u5185\u7f51\u7684\u4e00\u90e8\u5206\u4e86\uff0c\u4ece\u817e\u8baf\u4e91\u5e7f\u5dde\u8282\u70b9\uff0c\u53ef\u4ee5\u975e\u5e38\u65b9\u4fbf\u7684\u8bbf\u95ee\u5176\u4ed6\u5404\u4e2a\u8282\u70b9\u3002<\/p>\n\n\n\n

\u5b9e\u73b0\u4e86\u8fd9\u4e2a\u9636\u6bb5\u4e4b\u540e\u5462\uff0c\u4ee5\u540e\u6709\u7a7a\u53ef\u4ee5\u6298\u817e\u4e0b\u5185\u7f51\u5168\u4e92\u8054\uff0c\u8ba9\u676d\u5dde\u673a\u623f\u548c\u4e0a\u6d77\u673a\u623f\u5185\u90e8\u7684\u8bbe\u5907\u76f8\u5173\u8bbf\u95ee\uff0c\u90fd\u901a\u8fc7\u672c\u673a\u623f\u7684VPN\u8282\u70b9\u8f6c\u53d1\u3002\u8fd9\u6837\u5c31\u4e0d\u4ec5\u4ec5\u662f\u62e8\u5165VPN\u7684\u8282\u70b9\uff0c\u800c\u662f\u6240\u6709\u7684\u4e94\u4e2a\u5185\u7f51\u5b50\u7f51\u5168\u90e8\u4e92\u8054\u3002\u90a3\u7528\u7740\u8fd8\u662f\u4f1a\u65b9\u4fbf\u66f4\u591a\u7684\u3002<\/p>\n\n\n\n

\u800c\u4e14\u5b89\u5168\u6027\u597d\u554a\u3002<\/p>\n\n\n\n

\u57fa\u4e8e\u8fd9\u4e2a\u53ef\u4ee5\u628a\u5176\u4ed6\u4e0d\u5fc5\u8981\u7684\u516c\u7f51\u5165\u53e3\u5168\u90e8\u5173\u95ed\uff0c\u81ea\u5df1\u60f3\u7528\u7684\u65f6\u5019\uff0c\u901a\u8fc7VPN\u62e8\u5165\u817e\u8baf\u4e91\u4e2d\u67a2\u8282\u70b9\uff0c\u8fdb\u5165\u5185\u7f51\u3002\u9664\u4e86\u6b64\u5165\u53e3\uff0c\u6ca1\u6709\u5176\u4ed6\u4efb\u4f55\u7684\u610f\u5916\u7aef\u53e3\u66b4\u9732\u3002\u6bd4\u73b0\u5728\u53ef\u8ba9\u6211\u653e\u5fc3\u591a\u4e86\u3002<\/p>\n\n\n\n

\u5907\u6ce8\uff1a\u6240\u6709\u670d\u52a1\u5668\u8282\u70b9\u4f7f\u7528centos7.9\u7248\u672c<\/p>\n\n\n\n

1\u3001\u817e\u8baf\u4e91\u670d\u52a1\u5668\u5b89\u88c5VPN SERVER<\/strong><\/p>\n\n\n\n

\u8be6\u7ec6\u7684\u5b89\u88c5\u6b65\u9aa4\u4e0d\u5c55\u5f00\uff0c\u5927\u5bb6\u81ea\u884c\u767e\u5ea6\u3002\u9700\u8981\u8bf4\u660e\u7684\u662f\uff0c\u56e0\u4e3a\u6211\u4eec\u9700\u8981\u4fdd\u8bc1\u540e\u7eed\u7684\u7f51\u7edc\u7ed3\u6784\uff0c\u56e0\u6b64\u5bf9\u4e8e\u6bcf\u4e2aVPN-CLIENT\uff0c\u9700\u8981\u914d\u7f6e\u56fa\u5b9aIP\u3002<\/p>\n\n\n\n

1\uff09\u7f16\u8f91 VPN \u670d\u52a1\u5668\u4e0a\u7684\u00a0\/etc\/xl2tpd\/xl2tpd.conf<\/code>\u3002\u5c06\u00a0ip range = 192.168.42.10-192.168.42.250<\/code>\u00a0\u66ff\u6362\u4e3a\u6bd4\u5982\u00a0ip range = 192.168.42.10-192.168.42.<\/code>99\u3002\u8fd9\u6837\u53ef\u4ee5\u7f29\u5c0f\u81ea\u52a8\u5206\u914d\u7684 IP \u5730\u5740\u6c60\uff0c\u4ece\u800c\u4f7f\u66f4\u591a\u7684 IP \u53ef\u4ee5\u4f5c\u4e3a\u9759\u6001 IP \u5206\u914d\u7ed9\u5ba2\u6237\u7aef\u3002<\/p>\n\n\n\n

2\uff09\u7f16\u8f91 VPN \u670d\u52a1\u5668\u4e0a\u7684\u00a0\/etc\/ppp\/chap-secrets<\/code>\u3002\u4f8b\u5982\uff0c\u6587\u4ef6\u5185\u5bb9\uff1a<\/p>\n\n\n\n

“vpnuser” l2tpd “password” *<\/p>\n\n\n\n

“node-hw” l2tpd “password” 192.168.42.101<\/p>\n\n\n\n

“node-ali” l2tpd “password” 192.168.42.102<\/p>\n\n\n\n

\u6700\u540e\u4e00\u5217\uff0c\u5c31\u662f\u6211\u4eec\u4e3a\u6bcf\u4e2aVPN\u7528\u6237\u6307\u5b9a\u7684\u56fa\u5b9aIP\u5730\u5740<\/p>\n\n\n\n

2\u3001\u534e\u4e3a\u4e91\u670d\u52a1\u5668\u5b89\u88c5VPN-CLIENT<\/strong><\/p>\n\n\n\n

<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
yum<\/span> <\/span>install<\/span> <\/span>epel-release<\/span><\/span>\nyum<\/span> <\/span>--enablerepo=epel<\/span> <\/span>install<\/span> <\/span>strongswan<\/span> <\/span>xl2tpd<\/span> <\/span>net-tools<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u5f00\u59cb\u914d\u7f6eVPN-CLIENT\uff0c\u4e0d\u5c55\u5f00\uff0c\u6309\u7167\u6b63\u5e38\u5b89\u88c5\u914d\u7f6e\u6b65\u9aa4\u641e\u5373\u53ef\u3002\u9700\u8981\u8bf4\u4e00\u4e0b\u542f\u52a8\u8fc7\u7a0b\u3002<\/p>\n\n\n\n
\u521b\u5efa\u63a7\u5236\u6587\u4ef6<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
mkdir<\/span> <\/span>-p<\/span> <\/span>\/var\/run\/xl2tpd<\/span><\/span>\ntouch<\/span> <\/span>\/var\/run\/xl2tpd\/l2tp-control<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u91cd\u542f\u670d\u52a1<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
service<\/span> <\/span>strongswan<\/span> <\/span>restart<\/span><\/span>\nservice<\/span> <\/span>xl2tpd<\/span> <\/span>restart<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u5f00\u542fIPSec<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
strongswan<\/span> <\/span>up<\/span> <\/span>myvpn<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u62e8\u53f7<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
echo<\/span> <\/span>"<\/span>c myvpn<\/span>"<\/span> <\/span>><\/span> <\/span>\/var\/run\/xl2tpd\/l2tp-control<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u67e5\u770b\u63a5\u53e3\u5217\u8868\uff0c\u6709ppp0\uff0c\u6210\u529f<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
[<\/span>root@ecs-4bf3 <\/span>~<\/span>]<\/span># ifconfig<\/span><\/span>\neth0:<\/span> <\/span>flags=<\/span>4163<\/span><<\/span>UP,BROADCAST,RUNNING,MULTICAS<\/span>T<\/span>><\/span>  <\/span>mtu<\/span> <\/span>1500<\/span><\/span>\n        <\/span>inet<\/span> <\/span>192.168<\/span>.20.21<\/span>  <\/span>netmask<\/span> <\/span>255.255<\/span>.255.0<\/span>  <\/span>broadcast<\/span> <\/span>192.168<\/span>.20.255<\/span><\/span>\n        <\/span>inet6<\/span> <\/span>fe80::f816:3eff:fe89:f5f6<\/span>  <\/span>prefixlen<\/span> <\/span>64<\/span>  <\/span>scopeid<\/span> <\/span>0x20<\/span><<\/span>lin<\/span>k<\/span>><\/span><\/span>\n        <\/span>ether<\/span> <\/span>fa:16:3e:89:f5:f6<\/span>  <\/span>txqueuelen<\/span> <\/span>1000<\/span>  (Ethernet)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>71342<\/span>  <\/span>bytes<\/span> <\/span>16857354<\/span> (16.0 <\/span>MiB<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>68052<\/span>  <\/span>bytes<\/span> <\/span>16260760<\/span> (15.5 <\/span>MiB<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span>\n<\/span>\nlo:<\/span> <\/span>flags=<\/span>73<\/span><<\/span>UP,LOOPBACK,RUNNIN<\/span>G<\/span>><\/span>  <\/span>mtu<\/span> <\/span>65536<\/span><\/span>\n        <\/span>inet<\/span> <\/span>127.0<\/span>.0.1<\/span>  <\/span>netmask<\/span> <\/span>255.0<\/span>.0.0<\/span><\/span>\n        <\/span>inet6<\/span> <\/span>::1<\/span>  <\/span>prefixlen<\/span> <\/span>128<\/span>  <\/span>scopeid<\/span> <\/span>0x10<\/span><<\/span>hos<\/span>t<\/span>><\/span><\/span>\n        <\/span>loop<\/span>  <\/span>txqueuelen<\/span> <\/span>1000<\/span>  (Local <\/span>Loopback<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>12<\/span>  <\/span>bytes<\/span> <\/span>946<\/span> (946.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>12<\/span>  <\/span>bytes<\/span> <\/span>946<\/span> (946.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span>\n<\/span>\nppp0:<\/span> <\/span>flags=<\/span>4305<\/span><<\/span>UP,POINTOPOINT,RUNNING,NOARP,MULTICAS<\/span>T<\/span>><\/span>  <\/span>mtu<\/span> <\/span>1280<\/span><\/span>\n        <\/span>inet<\/span> <\/span>192.168<\/span>.42.101<\/span>  <\/span>netmask<\/span> <\/span>255.255<\/span>.255.255<\/span>  <\/span>destination<\/span> <\/span>192.168<\/span>.42.1<\/span><\/span>\n        <\/span>ppp<\/span>  <\/span>txqueuelen<\/span> <\/span>3<\/span>  (Point-to-Point <\/span>Protocol<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>3<\/span>  <\/span>bytes<\/span> <\/span>54<\/span> (54.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>3<\/span>  <\/span>bytes<\/span> <\/span>54<\/span> (54.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
3\u3001\u540c\u7406\u914d\u7f6e\u963f\u91cc\u4e91\u8282\u70b9\uff0c\u539f\u5148\u4e3aalibaba\u64cd\u4f5c\u7cfb\u7edf\uff0c\u6211\u4eec\u66f4\u6362\u4e3a\u4e86centos7.9\uff0c\u4f9d\u6b21\u914d\u7f6e\uff0c\u76f4\u5230\u62e8\u53f7\u6210\u529f\u3002<\/strong><\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
[<\/span>root@iZbp1dlg2my90omu0sb8nuZ <\/span>~<\/span>]<\/span># ifconfig<\/span><\/span>\neth0:<\/span> <\/span>flags=<\/span>4163<\/span><<\/span>UP,BROADCAST,RUNNING,MULTICAS<\/span>T<\/span>><\/span>  <\/span>mtu<\/span> <\/span>1500<\/span><\/span>\n        <\/span>inet<\/span> <\/span>192.168<\/span>.21.21<\/span>  <\/span>netmask<\/span> <\/span>255.255<\/span>.255.0<\/span>  <\/span>broadcast<\/span> <\/span>192.168<\/span>.21.255<\/span><\/span>\n        <\/span>inet6<\/span> <\/span>fe80::216:3eff:fe0a:7ca8<\/span>  <\/span>prefixlen<\/span> <\/span>64<\/span>  <\/span>scopeid<\/span> <\/span>0x20<\/span><<\/span>lin<\/span>k<\/span>><\/span><\/span>\n        <\/span>ether<\/span> <\/span>00<\/span>:16:3e:0a:7c:a8<\/span>  <\/span>txqueuelen<\/span> <\/span>1000<\/span>  (Ethernet)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>59834<\/span>  <\/span>bytes<\/span> <\/span>86519474<\/span> (82.5 <\/span>MiB<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>6900<\/span>  <\/span>bytes<\/span> <\/span>902951<\/span> (881.7 <\/span>KiB<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span>\n<\/span>\nlo:<\/span> <\/span>flags=<\/span>73<\/span><<\/span>UP,LOOPBACK,RUNNIN<\/span>G<\/span>><\/span>  <\/span>mtu<\/span> <\/span>65536<\/span><\/span>\n        <\/span>inet<\/span> <\/span>127.0<\/span>.0.1<\/span>  <\/span>netmask<\/span> <\/span>255.0<\/span>.0.0<\/span><\/span>\n        <\/span>inet6<\/span> <\/span>::1<\/span>  <\/span>prefixlen<\/span> <\/span>128<\/span>  <\/span>scopeid<\/span> <\/span>0x10<\/span><<\/span>hos<\/span>t<\/span>><\/span><\/span>\n        <\/span>loop<\/span>  <\/span>txqueuelen<\/span> <\/span>1000<\/span>  (Local <\/span>Loopback<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>0<\/span>  <\/span>bytes<\/span> <\/span>0<\/span> (0.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>0<\/span>  <\/span>bytes<\/span> <\/span>0<\/span> (0.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span>\n<\/span>\nppp0:<\/span> <\/span>flags=<\/span>4305<\/span><<\/span>UP,POINTOPOINT,RUNNING,NOARP,MULTICAS<\/span>T<\/span>><\/span>  <\/span>mtu<\/span> <\/span>1280<\/span><\/span>\n        <\/span>inet<\/span> <\/span>192.168<\/span>.42.102<\/span>  <\/span>netmask<\/span> <\/span>255.255<\/span>.255.255<\/span>  <\/span>destination<\/span> <\/span>192.168<\/span>.42.1<\/span><\/span>\n        <\/span>ppp<\/span>  <\/span>txqueuelen<\/span> <\/span>3<\/span>  (Point-to-Point <\/span>Protocol<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>packets<\/span> <\/span>3<\/span>  <\/span>bytes<\/span> <\/span>54<\/span> (54.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>RX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span>  <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>frame<\/span> <\/span>0<\/span><\/span>\n        <\/span>TX<\/span> <\/span>packets<\/span> <\/span>3<\/span>  <\/span>bytes<\/span> <\/span>54<\/span> (54.0 <\/span>B<\/span>)<\/span><\/span>\n        <\/span>TX<\/span> <\/span>errors<\/span> <\/span>0<\/span>  <\/span>dropped<\/span> <\/span>0<\/span> <\/span>overruns<\/span> <\/span>0<\/span>  <\/span>carrier<\/span> <\/span>0<\/span>  <\/span>collisions<\/span> <\/span>0<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u7136\u540e\u6211\u4eec\u5728\u817e\u8baf\u4e91\u7684\u4e2d\u67a2\u8282\u70b9\u4e0a\uff0c\u5c31\u53ef\u4ee5\u770b\u5230\u534e\u4e3a\u4e91\u548c\u963f\u91cc\u4e91\u90fd\u62e8\u5165\u4e0a\u6765\u4e86\u3002<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
[<\/span>root@VM-12-4-centos <\/span>~<\/span>]<\/span># ipsec trafficstatus<\/span><\/span>\n#67: "l2tp-psk"[29] 121.36.XXX.202, type=ESP, add_time=1715344366, inBytes=4642, outBytes=4637, maxBytes=2^63B, id='192.168.20.21'<\/span><\/span>\n#68: "l2tp-psk"[29] 121.36.XXX.202, type=ESP, add_time=0, inBytes=974, outBytes=974, maxBytes=2^63B, id='192.168.20.21'<\/span><\/span>\n#70: "l2tp-psk"[31] 118.31.XXX.179, type=ESP, add_time=1715347319, inBytes=732, outBytes=714, maxBytes=2^63B, id='192.168.21.21'<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
4\u3001\u914d\u7f6e\u7b14\u8bb0\u672c\u7535\u8111\u672c\u5730VPN<\/strong><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u672c\u5730\u7b14\u8bb0\u672cVPN\u62e8\u53f7\uff0c\u7136\u540e\u767b\u9646\u5230\u817e\u8baf\u4e91\u4e2d\u67a2\u8282\u70b9\u3002\u53ef\u4ee5\u6b63\u5e38\u4e0e\u963f\u91cc\u4e91\u548c\u534e\u4e3a\u4e91\u8282\u70b9\u901a\u8baf\u3002<\/p>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
xudong@xudongdeMacBook-Pro<\/span> <\/span>~<\/span> <\/span>%<\/span> <\/span>ssh<\/span> <\/span>root@192.168.42.1<\/span><\/span>\nroot@192.168.42.1<\/span>'s password: <\/span><\/span>\nLast failed login: Fri May 10 21:46:12 CST 2024 from 221.215.21.91 on ssh:notty<\/span><\/span>\nThere were 7 failed login attempts since the last successful login.<\/span><\/span>\nLast login: Fri May 10 21:24:13 2024 from 116.6.232.33<\/span><\/span>\n[root@VM-12-4-centos ~]# ping 192.168.42.101<\/span><\/span>\nPING 192.168.42.101 (192.168.42.101) 56(84) bytes of data.<\/span><\/span>\n64 bytes from 192.168.42.101: icmp_seq=1 ttl=64 time=33.9 ms<\/span><\/span>\n64 bytes from 192.168.42.101: icmp_seq=2 ttl=64 time=33.9 ms<\/span><\/span>\n64 bytes from 192.168.42.101: icmp_seq=3 ttl=64 time=33.9 ms<\/span><\/span>\n^C<\/span><\/span>\n--- 192.168.42.101 ping statistics ---<\/span><\/span>\n3 packets transmitted, 3 received, 0% packet loss, time 2002ms<\/span><\/span>\nrtt min\/avg\/max\/mdev = 33.913\/33.933\/33.949\/0.213 ms<\/span><\/span>\n[root@VM-12-4-centos ~]# ping 192.168.42.102<\/span><\/span>\nPING 192.168.42.102 (192.168.42.102) 56(84) bytes of data.<\/span><\/span>\n64 bytes from 192.168.42.102: icmp_seq=1 ttl=64 time=32.4 ms<\/span><\/span>\n64 bytes from 192.168.42.102: icmp_seq=2 ttl=64 time=32.4 ms<\/span><\/span>\n64 bytes from 192.168.42.102: icmp_seq=3 ttl=64 time=32.4 ms<\/span><\/span>\n64 bytes from 192.168.42.102: icmp_seq=4 ttl=64 time=32.3 ms<\/span><\/span>\n^C<\/span><\/span>\n--- 192.168.42.102 ping statistics ---<\/span><\/span>\n5 packets transmitted, 4 received, 20% packet loss, time 4004ms<\/span><\/span>\nrtt min\/avg\/max\/mdev = 32.373\/32.415\/32.447\/0.182 ms<\/span><\/span>\n[root@VM-12-4-centos ~]# <\/span><\/span><\/code><\/pre><\/div>\n\n\n\n
\u4f46\u662f\uff0c\u4e3a\u5565\u6211\u9700\u8981\u5148\u767b\u5f55\u5230\u817e\u8baf\u4e91\u4e2d\u67a2\u8282\u70b9\u5462\uff1f\u6211\u81ea\u5df1\u672c\u673a\uff0c\u4f5c\u4e3a\u865a\u62df\u7f51\u7684\u4e00\u4e2a\u8282\u70b9\uff0c\u548c\u5176\u4ed6\u8282\u70b9\u4e3a\u5565\u4e0d\u80fd\u76f4\u63a5\u4e92\u901a\uff1f<\/p>\n\n\n\n
\u8fd9\u4e2a\u95ee\u9898\uff0c\u540e\u9762\u89e3\u51b3\u5427\u3002\u770b\u6765\u8fd8\u5dee\u4e00\u70b9\u4e1c\u897f\u3002<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5404\u4e2a\u516c\u6709\u4e91\u7684\u670d\u52a1\u5668\u5f00\u59cb\u6253\u6298\u554a\uff0c\u963f\u91cc\u4e9199\u5143\u4e00\u5e742C2G3M\u56fa\u5b9a\u5e26\u5bbd\uff0c\u817e\u8baf\u4e9199\u5143\u4e00\u5e742C2G4M\u5e26\u5bbd\uff08\u4f46\u662f\u6709\u6bcf\u6708300GB\u6d41\u91cf\u9650\u5236\uff09\uff0c\u867d\u7136\u6211\u559c\u6b22\u534e\u4e3a\u4e91\uff0c\u4f46\u8010\u4e0d\u4f4f\u534e\u4e3a\u4e91\u5b9e\u5728\u662f\u4e0d\u7ed9\u4f18\u60e0\u554a\u3002\u4e0d\u8fc7\u6211\u4e91\u670d\u52a1\u5668\u7eed\u8d39\u7eed\u5230\u4e862026\u5e74\u4e86\u3002\u5f00\u901a\u4e24\u4e2a\u65b0\u8282\u70b9\u5427\uff0c\u8bf4\u4e0d\u5b9a\u540e\u9762\u5e72\u5565\u4f1a\u7528\u4e0a\u3002 \u8fd9\u6837\u7684\u8bdd\uff0c\u52a0\u4e0a\u676d\u5dde\u548c\u4e0a\u6d77\u4e24\u4e2a\u81ea\u5df1\u7684\u5185\u7f51\u8282\u70b9\uff0c\u5c31\u6709\u4e94\u4e2a\u533a\u57df\u4e86\uff0c\u5c1d\u8bd5\u4e0b\u591a\u4e91\u7ec4\u7f51\uff1f\u8bf4\u5e72\u5c31\u5e72\u5427\u3002\u5148\u89c4\u5212\u4e00\u4e0b\u7f51\u7edc\u5206\u6bb5\u548c\u8282\u70b9\u804c\u80fd\uff0c\u8003\u8651\u5230\u540e\u7eed\u6709\u53ef\u80fd\u8bb2\u6240\u6709\u7684\u8282\u70b9\u7684\u5b50\u7f51\u8fde\u63a5\u6210\u4e00\u4e2a\u5927\u5185\u7f51\uff0c\u6240\u4ee5\u5404\u4e2a\u7f51\u6bb5\u5fc5\u987b\u4e0d\u80fd\u51b2\u7a81\u3002 \u676d\u5dde\u5bb6\u91cc\uff0c\u4e3a\u4e86\u51cf\u5c11\u7ed9\u666e\u901a\u8bbe\u5907\u5e26\u6765\u7684\u56f0\u6270\uff0c\u5c31\u7528\u8def\u7531\u5668\u666e\u904d\u9ed8\u8ba4\u7684192.168.0.0\u7684\u7f51\u6bb5\uff0c\u5176\u4ed6\u51e0\u4e2a\u8282\u70b9\u8fdb\u884c\u5206\u6bb5\u3002 \u8fd9\u91cc\u8bf4\u4e00\u4e2a\u63d2\u66f2\uff0c\u628a\u963f\u91cc\u4e91 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,23],"tags":[74,73],"class_list":["post-637","post","type-post","status-publish","format-standard","hentry","category-5","category-23","tag-vpn","tag-wan"],"_links":{"self":[{"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/posts\/637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=637"}],"version-history":[{"count":6,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/posts\/637\/revisions"}],"predecessor-version":[{"id":649,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=\/wp\/v2\/posts\/637\/revisions\/649"}],"wp:attachment":[{"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xudongvp.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}