SSH切换到 root

sudo -i

修改密码

passwd root

修改SSH配置文件

vi /etc/ssh/sshd_config

允许密码登录 将注释去掉并修改成yes

PermitRootLogin yes
PasswordAuthentication yes

重启SSH服务或者重启服务器

1. CentOS6

   临时关闭

   service iptables stop

   禁止开机启动

   chkconfig iptables off

2. CentOS7默认使用firewalld

   临时关闭

   systemctl stop firewalld

   禁止开机启动

   systemctl disable firewalld
   Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
   Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

3. iptables-service

   安装iptables

   yum install -y iptables-services

   关闭防火墙

   service iptables stop

   检查防火墙状态

   service iptables status

修改CentOS默认yum源为mirrors.163.com

1、首先备份系统自带yum源配置文件/etc/yum.repos.d/CentOS-Base.repo

mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

2、进入yum源配置文件所在的文件夹

cd /etc/yum.repos.d/

3、下载163的yum源配置文件到上面那个文件夹内

CentOS7

wget http://mirrors.163.com/.help/CentOS7-Base-163.repo

CentOS6

wget http://mirrors.163.com/.help/CentOS6-Base-163.repo

CentOS5

yum.repos.d]# wget http://mirrors.163.com/.help/CentOS5-Base-163.repo

4、运行yum makecache生成缓存

yum makecache

5、这时候再更新系统就会看到以下mirrors.163.com信息

yum -y update

已加载插件：fastestmirror, refresh-packagekit, security

设置更新进程Loading mirror speeds from cached hostfile

* base: mirrors.163.com

* extras: mirrors.163.com

* updates: mirrors.163.com

修改CentOS默认yum源为mirrors.aliyun.com

1、首先备份系统自带yum源配置文件/etc/yum.repos.d/CentOS-Base.repo

mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup

2、下载ailiyun的yum源配置文件到/etc/yum.repos.d/

CentOS7

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

CentOS6

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo

CentOS5

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-5.repo

3、运行yum makecache生成缓存

yum makecache

4、这时候再更新系统就会看到mirrors.aliyun.com信息

remove vim-common

apt-get remove vim-common

install vim full

apt-get install vim

docker pull fcojean/l2tp-ipsec-vpn-server

创建env

vi vpn.env

VPN_IPSEC_PSK=nonnix.com
VPN_USER_CREDENTIAL_LIST=[{"login":"uesr","password":"ssfq"},{"login":"tsi","password":"ssfq"},{"login":"vpn","password":"ssfq"}]

加载 IPsec NETKEY 内核模块

modprobe af_key

加载env配置文件，将对应端口与服务器端口绑定

docker run \
--name l2tp-ipsec-vpn-server \
--env-file ./vpn.env \
-p 500:500/udp \
-p 4500:4500/udp \
-v /lib/modules:/lib/modules:ro \
-d --privileged \
fcojean/l2tp-ipsec-vpn-server

查看VPN状态

docker logs vpn-server

查看和关闭防火墙，需开放500端口和4500端口

systemctl status firewalld
systemctl stop firewalld