how install pptpd?

Portal Home > Knowledgebase > Linux > how install pptpd?

Login to your root via SSH and enter the following:

run

wget http://www.up2vps.com/box/pptpd.sh

sh pptpd.sh

or install it manual

PPTP VPN Setup Guide for a Debian OpenVZ VPS

To verify PPP is working, run:

1

cat /dev/ppp

It should return this:

cat: /dev/net/tun: File descriptor in bad state

Server Setup:

1. Install the pptp server package:

1

apt-get install pptpd

2. Edit the “/etc/pptpd.conf” configuration file:

1

vim /etc/pptpd.conf

Uncomment the localip and remoteip lines and change them to something like this:

1

2

localip 11.22.33.44

remoteip 10.1.0.1-100

Where the “localip” is the address of your VPS, and the remoteip are the addresses that will be handed out to the clients, it is up to you to adjust these for your network’s requirements.

3. Edit the “/etc/ppp/pptpd-options” configuration file:

1

vim /etc/ppp/pptpd-options

Uncomment the ms-dns lines and change them to:

1

2

ms-dns 208.67.222.222

ms-dns 208.67.220.220

Where the IP used for the ms-dns line is the DNS server for the local network your client will be connecting to. In my example, I used OpenDNS’s DNS servers.

4. Edit the chap-secrets file:

1

vim /etc/ppp/chap-secrets

Add the authentication credentials for a user’s connection, in the following syntax:

username* userpassword*

Make sure that you separate each entry with a single tab. It could be like this:

1

john * jsmith88 *

5. Edit the MTU settings:

1

vim /etc/ppp/ip-up

Add this line to the end of the file before exit 0:

1

ifconfig $1 mtu 1400

If exit 0 is missing, then add it after “ifconfig $1 mtu 1400“, like so:

1

2

ifconfig $1 mtu 1400

exit 0

6. Allow PPTP through the firewall (iptables):

1

iptables -t nat -A POSTROUTING -j SNAT --to-source 11.22.33.44

Change 11.22.33.44 to your VPS’s public IP address.

After that, type in:

1

iptables-save

7. Restart the pptpd for the settings to take affect:

1

/etc/init.d/pptpd restart

If you don’t want to grant yourself access to anything beyond the server, then you’re done on the server side.

8. Enable Forwarding:

By enabling forwarding we make the entire network available to us when we connect and not just the VPN server itself. Doing so allows the connecting client to “jump” through the VPN server, to all other devices on the network. If you don’t enable forwarding, you will not be able to browse the web through your proxy.

Edit the sysctl file:

1

vim /etc/sysctl.conf

Find the “net.ipv4.ip_forward” and uncomment it by removing the “#”:

1

net.ipv4.ip_forward=1

You can either restart the system or issue this command for the setting to take affect:

1

sysctl -p

With forwarding enabled, all the server side settings are prepared.

Here is a script to reapply iptables settings at boot (in case your server restarts/crashes/etc.) Make sure you change the IP address to your VPS address.

iptables-save > /etc/iptables.conf

cat > /etc/network/if-pre-up.d/iptables <
#!/bin/sh

iptables-restore < /etc/iptables.conf

END

chmod +x /etc/network/if-pre-up.d/iptables

Add to Favourites Print this Article