118 lines
2.4 KiB
Bash
118 lines
2.4 KiB
Bash
#!/bin/bash
|
|
|
|
# 颜色代码
|
|
GREEN='\033[0;32m'
|
|
RED='\033[0;31m'
|
|
NC='\033[0m'
|
|
|
|
# 检查Root权限
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo -e "${RED}必须以root权限运行此脚本${NC}"
|
|
exit 1
|
|
fi
|
|
|
|
# 生成随机字符串
|
|
generate_random_string() {
|
|
tr -dc 'A-Za-z0-9' < /dev/urandom | head -c "$1"
|
|
}
|
|
|
|
# 主安装函数
|
|
install_l2tp_vpn() {
|
|
# 配置参数
|
|
VPN_SERVER_IP=$(curl -s http://ipinfo.io/ip)
|
|
VPN_PSK=$(generate_random_string 16)
|
|
VPN_USERNAME=$(generate_random_string 8)
|
|
VPN_PASSWORD=$(generate_random_string 12)
|
|
|
|
# 更新和安装依赖
|
|
apt-get update
|
|
apt-get install -y strongswan xl2tpd ppp
|
|
|
|
# IPsec配置
|
|
cat > /etc/ipsec.conf << EOF
|
|
config setup
|
|
charondebug="all"
|
|
uniqueids=never
|
|
|
|
conn l2tp-psk
|
|
authby=secret
|
|
left=%defaultroute
|
|
leftid=$VPN_SERVER_IP
|
|
leftauth=psk
|
|
leftprotoport=17/1701
|
|
leftsendcert=never
|
|
right=%any
|
|
rightauth=psk
|
|
rightprotoport=17/1701
|
|
rightsourceip=10.0.0.0/24
|
|
auto=add
|
|
EOF
|
|
|
|
cat > /etc/ipsec.secrets << EOF
|
|
: PSK "$VPN_PSK"
|
|
EOF
|
|
|
|
# xl2tpd配置
|
|
cat > /etc/xl2tpd/xl2tpd.conf << EOF
|
|
[global]
|
|
port = 1701
|
|
|
|
[lns default]
|
|
ip range = 10.0.0.2-10.0.0.254
|
|
local ip = 10.0.0.1
|
|
require chap = yes
|
|
refuse pap = yes
|
|
require authentication = yes
|
|
name = L2TPServer
|
|
ppp debug = yes
|
|
pppoptfile = /etc/ppp/options.xl2tpd
|
|
length bit = yes
|
|
EOF
|
|
|
|
cat > /etc/ppp/options.xl2tpd << EOF
|
|
ipcp-accept-local
|
|
ipcp-accept-remote
|
|
require-mschap-v2
|
|
ms-dns 8.8.8.8
|
|
ms-dns 1.1.1.1
|
|
noccp
|
|
auth
|
|
hide-password
|
|
nodefaultroute
|
|
usepeerdns
|
|
name l2tpd
|
|
plugin /usr/lib/pppd/*/libplugin.so
|
|
EOF
|
|
|
|
cat > /etc/ppp/chap-secrets << EOF
|
|
$VPN_USERNAME * $VPN_PASSWORD *
|
|
EOF
|
|
|
|
# 设置权限
|
|
chmod 600 /etc/ipsec.secrets /etc/ppp/chap-secrets
|
|
|
|
# 重启服务(使用完整路径)
|
|
/usr/sbin/service strongswan-starter restart
|
|
/usr/sbin/service xl2tpd restart
|
|
|
|
# 输出配置信息
|
|
echo -e "${GREEN}================================================================"
|
|
echo -e "L2TP/IPsec VPN连接详情："
|
|
echo -e "服务器IP: $VPN_SERVER_IP"
|
|
echo -e "用户名: $VPN_USERNAME"
|
|
echo -e "密码: $VPN_PASSWORD"
|
|
echo -e "预共享密钥: $VPN_PSK"
|
|
echo -e "================================================================${NC}"
|
|
|
|
# 保存连接信息到文件
|
|
cat > /root/vpn_credentials.txt << EOF
|
|
服务器IP: $VPN_SERVER_IP
|
|
用户名: $VPN_USERNAME
|
|
密码: $VPN_PASSWORD
|
|
预共享密钥: $VPN_PSK
|
|
EOF
|
|
}
|
|
|
|
# 执行安装
|
|
install_l2tp_vpn
|