mirror of
https://github.com/teddysun/across.git
synced 2025-01-19 06:19:35 +08:00
257 lines
6.9 KiB
Bash
257 lines
6.9 KiB
Bash
#!/bin/bash
|
|
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
|
|
export PATH
|
|
#===============================================================================================
|
|
# SYSTEM REQUIRED: Ubuntu (32bit/64bit)
|
|
# DESCRIPTION: Auto install L2TP for Ubuntu
|
|
# Author: Teddysun <i@teddysun.com>
|
|
#===============================================================================================
|
|
|
|
if [[ "$USER" != 'root' ]]; then
|
|
echo "Sorry, you need to run this as root"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! -e /dev/net/tun ]]; then
|
|
echo "TUN/TAP is not available"
|
|
exit 1
|
|
fi
|
|
|
|
clear
|
|
echo ""
|
|
echo "#############################################################"
|
|
echo "# Auto install L2TP for Ubuntu #"
|
|
echo "# System Required: Ubuntu(32bit/64bit) #"
|
|
echo "# Intro: http://teddysun.com/135.html #"
|
|
echo "# #"
|
|
echo "# Author: Teddysun <i@teddysun.com> #"
|
|
echo "# #"
|
|
echo "#############################################################"
|
|
echo ""
|
|
|
|
tmpip=`ifconfig |grep 'inet' | grep -Evi '(inet6|127.0.0.1)' | awk '{print $2}' | cut -d: -f2 | tail -1`
|
|
if [[ "$tmpip" = "" ]]; then
|
|
tmpip=$(curl -4 icanhazip.com)
|
|
fi
|
|
|
|
echo "Please input IP-Range:"
|
|
read -p "(Default Range: 10.1.2):" iprange
|
|
if [ "$iprange" = "" ]; then
|
|
iprange="10.1.2"
|
|
fi
|
|
|
|
echo "Please input PSK:"
|
|
read -p "(Default PSK: vpn):" mypsk
|
|
if [ "$mypsk" = "" ]; then
|
|
mypsk="vpn"
|
|
fi
|
|
|
|
clear
|
|
get_char(){
|
|
SAVEDSTTY=`stty -g`
|
|
stty -echo
|
|
stty cbreak
|
|
dd if=/dev/tty bs=1 count=1 2> /dev/null
|
|
stty -raw
|
|
stty echo
|
|
stty $SAVEDSTTY
|
|
}
|
|
echo ""
|
|
echo "ServerIP:"
|
|
echo "$tmpip"
|
|
echo ""
|
|
echo "Server Local IP:"
|
|
echo "$iprange.1"
|
|
echo ""
|
|
echo "Client Remote IP Range:"
|
|
echo "$iprange.2-$iprange.254"
|
|
echo ""
|
|
echo "PSK:"
|
|
echo "$mypsk"
|
|
echo ""
|
|
echo "Press any key to start...or Press Ctrl+c to cancel"
|
|
char=`get_char`
|
|
clear
|
|
|
|
# Install some necessary tools
|
|
apt-get install -y ppp iptables make gcc gmp-devel libgmp3-dev bison flex libpcap-devel lsof vim
|
|
#
|
|
cur_dir=`pwd`
|
|
mkdir -p $cur_dir/l2tp
|
|
cd $cur_dir/l2tp
|
|
# Download openswan-2.6.38.tar.gz
|
|
if [ -s openswan-2.6.38.tar.gz ]; then
|
|
echo "openswan-2.6.38.tar.gz [found]"
|
|
else
|
|
echo "openswan-2.6.38.tar.gz not found!!!download now......"
|
|
if ! wget http://lamp.teddysun.com/files/openswan-2.6.38.tar.gz;then
|
|
echo "Failed to download openswan-2.6.38.tar.gz, please download it to $cur_dir directory manually and retry."
|
|
exit 1
|
|
fi
|
|
fi
|
|
# Download rp-l2tp-0.4.tar.gz
|
|
if [ -s rp-l2tp-0.4.tar.gz ]; then
|
|
echo "rp-l2tp-0.4.tar.gz [found]"
|
|
else
|
|
echo "rp-l2tp-0.4.tar.gz not found!!!download now......"
|
|
if ! wget http://lamp.teddysun.com/files/rp-l2tp-0.4.tar.gz;then
|
|
echo "Failed to download rp-l2tp-0.4.tar.gz, please download it to $cur_dir directory manually and retry."
|
|
exit 1
|
|
fi
|
|
fi
|
|
# Download xl2tpd-1.2.4.tar.gz
|
|
if [ -s xl2tpd-1.2.4.tar.gz ]; then
|
|
echo "xl2tpd-1.2.4.tar.gz [found]"
|
|
else
|
|
echo "xl2tpd-1.2.4.tar.gz not found!!!download now......"
|
|
if ! wget http://lamp.teddysun.com/files/xl2tpd-1.2.4.tar.gz;then
|
|
echo "Failed to download xl2tpd-1.2.4.tar.gz, please download it to $cur_dir directory manually and retry."
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# untar all files
|
|
rm -rf $cur_dir/l2tp/untar
|
|
mkdir -p $cur_dir/l2tp/untar
|
|
echo "======untar all files,please wait a moment====="
|
|
tar -zxf openswan-2.6.38.tar.gz -C $cur_dir/l2tp/untar
|
|
tar -zxf rp-l2tp-0.4.tar.gz -C $cur_dir/l2tp/untar
|
|
tar -zxf xl2tpd-1.2.4.tar.gz -C $cur_dir/l2tp/untar
|
|
echo "=====untar all files completed!====="
|
|
# Install openswan-2.6.38
|
|
cd $cur_dir/l2tp/untar/openswan-2.6.38
|
|
make programs install
|
|
|
|
# Configuation ipsec
|
|
rm -rf /etc/ipsec.conf
|
|
touch /etc/ipsec.conf
|
|
cat >>/etc/ipsec.conf<<EOF
|
|
config setup
|
|
nat_traversal=yes
|
|
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
|
|
oe=off
|
|
protostack=netkey
|
|
|
|
conn L2TP-PSK-NAT
|
|
rightsubnet=vhost:%priv
|
|
also=L2TP-PSK-noNAT
|
|
|
|
conn L2TP-PSK-noNAT
|
|
authby=secret
|
|
pfs=no
|
|
auto=add
|
|
keyingtries=3
|
|
rekey=no
|
|
ikelifetime=8h
|
|
keylife=1h
|
|
type=transport
|
|
left=$tmpip
|
|
leftid=$tmpip
|
|
leftprotoport=17/1701
|
|
right=%any
|
|
rightid=%any
|
|
rightprotoport=17/%any
|
|
EOF
|
|
cat >>/etc/ipsec.secrets<<EOF
|
|
$tmpip %any: PSK "$mypsk"
|
|
EOF
|
|
sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g' /etc/sysctl.conf
|
|
sed -i 's/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=1/g' /etc/sysctl.conf
|
|
sysctl -p
|
|
iptables --table nat --append POSTROUTING --jump MASQUERADE
|
|
for each in /proc/sys/net/ipv4/conf/*
|
|
do
|
|
echo 0 > $each/accept_redirects
|
|
echo 0 > $each/send_redirects
|
|
done
|
|
|
|
# Install rp-l2tp-0.4
|
|
cd $cur_dir/l2tp/untar/rp-l2tp-0.4
|
|
./configure
|
|
make
|
|
cp handlers/l2tp-control /usr/local/sbin/
|
|
mkdir -p /var/run/xl2tpd/
|
|
ln -s /usr/local/sbin/l2tp-control /var/run/xl2tpd/l2tp-control
|
|
# Install xl2tpd-1.2.4.tar.gz
|
|
cd $cur_dir/l2tp/untar/xl2tpd-1.2.4
|
|
make install
|
|
mkdir -p /etc/xl2tpd
|
|
rm -rf /etc/xl2tpd/xl2tpd.conf
|
|
touch /etc/xl2tpd/xl2tpd.conf
|
|
cat >>/etc/xl2tpd/xl2tpd.conf<<EOF
|
|
[global]
|
|
ipsec saref = yes
|
|
[lns default]
|
|
ip range = $iprange.2-$iprange.254
|
|
local ip = $iprange.1
|
|
refuse chap = yes
|
|
refuse pap = yes
|
|
require authentication = yes
|
|
ppp debug = yes
|
|
pppoptfile = /etc/ppp/options.xl2tpd
|
|
length bit = yes
|
|
EOF
|
|
rm -rf /etc/ppp/options.xl2tpd
|
|
touch /etc/ppp/options.xl2tpd
|
|
cat >>/etc/ppp/options.xl2tpd<<EOF
|
|
require-mschap-v2
|
|
ms-dns 8.8.8.8
|
|
ms-dns 8.8.4.4
|
|
asyncmap 0
|
|
auth
|
|
crtscts
|
|
lock
|
|
hide-password
|
|
modem
|
|
debug
|
|
name l2tpd
|
|
proxyarp
|
|
lcp-echo-interval 30
|
|
lcp-echo-failure 4
|
|
EOF
|
|
|
|
# Set default user & password
|
|
pass=`openssl rand 6 -base64`
|
|
if [ "$1" != "" ]; then
|
|
pass=$1
|
|
fi
|
|
echo "vpn l2tpd ${pass} *" >> /etc/ppp/chap-secrets
|
|
|
|
touch /usr/bin/l2tpset
|
|
echo "#/bin/bash" >>/usr/bin/l2tpset
|
|
echo "for each in /proc/sys/net/ipv4/conf/*" >>/usr/bin/l2tpset
|
|
echo "do" >>/usr/bin/l2tpset
|
|
echo "echo 0 > \$each/accept_redirects" >>/usr/bin/l2tpset
|
|
echo "echo 0 > \$each/send_redirects" >>/usr/bin/l2tpset
|
|
echo "done" >>/usr/bin/l2tpset
|
|
chmod +x /usr/bin/l2tpset
|
|
iptables --table nat --append POSTROUTING --jump MASQUERADE
|
|
l2tpset
|
|
xl2tpd
|
|
cat >>/etc/rc.local<<EOF
|
|
iptables --table nat --append POSTROUTING --jump MASQUERADE
|
|
/etc/init.d/ipsec restart
|
|
/usr/bin/l2tpset
|
|
/usr/local/sbin/xl2tpd
|
|
EOF
|
|
clear
|
|
ipsec verify
|
|
printf "
|
|
#############################################################
|
|
# Auto install L2TP for Ubuntu #
|
|
# System Required: Ubuntu(32bit/64bit) #
|
|
# Intro: http://teddysun.com/135.html #
|
|
# #
|
|
# Author: Teddysun <i@teddysun.com> #
|
|
# #
|
|
#############################################################
|
|
if there are no [FAILED] above, then you can connect to your
|
|
L2TP VPN Server with the default user/password below:
|
|
|
|
ServerIP:$tmpip
|
|
username:vpn
|
|
password:${pass}
|
|
PSK:$mypsk
|
|
"
|
|
exit 0
|