{"id":61,"date":"2008-05-21T14:51:11","date_gmt":"2008-05-21T12:51:11","guid":{"rendered":"https:\/\/vpn.univ-fcomte.fr\/?p=61"},"modified":"2008-05-21T15:10:43","modified_gmt":"2008-05-21T13:10:43","slug":"installation-dun-serveur-vpn","status":"publish","type":"post","link":"https:\/\/vpn.univ-fcomte.fr\/?p=61","title":{"rendered":"Installation d’un serveur VPN : la base"},"content":{"rendered":"

installation serveur VPN debian Etch (exemple avec vpn2.univ-fcomte.fr en 194.57.89.65)<\/p>\n

swap 2Go primaire
\n\/boot 0.1Go primaire
\n\/ 1Go primaire
\n\/usr 5Go logique
\n\/tmp 1Go logique
\n\/var 24Go logique
\n\/backup 37Go logique<\/small><\/code><\/p>\n

vi \/etc\/apt\/sources.list<\/small><\/code>
\nmettre un # devant le cdrom<\/p>\n

apt-get install vlan
\nmodprobe 8021q
\necho \"8021q\" >> \/etc\/modules<\/small><\/code><\/p>\n

modifier le fichier \/etc\/network\/interfaces
\n#auto eth0
\n#iface eth0 inet static<\/p>\n

auto eth1
\niface eth1 inet static
\n address 194.57.89.65
\n netmask 255.255.255.240
\n network 194.57.89.64
\n broadcast 194.57.89.79
\n gateway 194.57.89.78
\n # dns-* options are implemented by the resolvconf package, if installed
\n dns-nameservers 194.57.91.200
\n dns-search univ-fcomte.fr
\n #mtu 1400<\/small><\/code><\/p>\n

un \/etc\/init.d\/network restart<\/small><\/code> ne suffit pas (eth0 reste configur\u00c3\u00a9) => reboot de la machine.
\n=> corrig\u00c3\u00a9 par la proc\u00c3\u00a9dure suivante :
\n– stopper l’interface (ifdown eth…)
\n– modifier les interfaces (suppression\/ajout\/modif)
\n– relancer l’interface (ifup eth…)<\/p>\n

configurer le commutateur pour mettre le port correspondant \u00e0 eth0 en trunk<\/p>\n

modification du fichier \/etc\/sysctl.conf<\/small><\/code>
\najout de :
\nnet.ipv4.icmp_ignore_bogus_error_responses=1
\nnet.ipv4.conf.all.log_martians=0
\nnet.ipv4.conf.default.rp_filter=0
\nnet.ipv4.conf.all.accept_redirects=0
\nnet.ipv4.conf.all.send_redirects=0
\nnet.ipv4.ip_forward=1
\nnet.ipv4.conf.all.arp_ignore=1
\nnet.ipv4.conf.all.arp_announce=2<\/small><\/code><\/p>\n

sysctl -p<\/small><\/code><\/p>\n

apt-get install ssh x-window-system vim emacs openswan traceroute wireshark tcpdump<\/small><\/code><\/p>\n

apt-get install sendmail logwatch tripwire rsync ntp<\/small><\/code>
\nmodif du fichier sendmail :
\nDS[smtp.univ-fcomte.fr]
\nDMvpn2.univ-fcomte.fr<\/small><\/code><\/p>\n

\/etc\/init.d\/sendmail restart<\/small><\/code><\/p>\n

vi \/etc\/aliases
\nroot : vpn-master@univ-fcomte.fr
\nnewaliases<\/small><\/code><\/p>\n

mettre \u00e0 jour le serveur DNS avec vpn2.univ-fcomte.fr 194.57.89.65<\/p>\n

config de \/etc\/ntp.conf
\nserver ntp.univ-fcomte.fr prefer
\nserver cri-08.univ-fcomte.fr<\/small><\/code><\/p>\n

apt-get remove exim4<\/small><\/code><\/p>\n

rsync -av 194.57.91.250:\/etc\/ipsec* \/etc\/<\/small><\/code>
\nconfig avec la valeur ip du serveur<\/p>\n

vi \/etc\/apt\/sources.list
\ndeb http:\/\/172.20.65.21\/debian\/ etch-lifc main
\napt-get update
\nwget http:\/\/172.20.65.21\/etch\/lifc-apt.key
\napt-key add lifc-apt.key
\napt-get install xl2tpd radiusclient1
\napt-get remove l2tpd
\nrsync -av 194.57.91.250:\/etc\/radiusclient \/etc\/<\/small><\/code>
\najout du serveur VPN dans les clients RADIUS sur le serveur RADIUS.<\/p>\n","protected":false},"excerpt":{"rendered":"

installation serveur VPN debian Etch (exemple avec vpn2.univ-fcomte.fr en 194.57.89.65) swap 2Go primaire \/boot 0.1Go primaire \/ 1Go primaire \/usr 5Go logique \/tmp 1Go logique \/var 24Go logique \/backup 37Go logique vi \/etc\/apt\/sources.list mettre un # devant le cdrom apt-get install vlan modprobe 8021q echo \u00ab\u00a08021q\u00a0\u00bb >> \/etc\/modules modifier le fichier \/etc\/network\/interfaces #auto eth0 #iface […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[85,14,31],"class_list":["post-61","post","type-post","status-publish","format-standard","hentry","category-informations-techniques","tag-installation","tag-serveur","tag-vpn"],"_links":{"self":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/61","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=61"}],"version-history":[{"count":0,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=\/wp\/v2\/posts\/61\/revisions"}],"wp:attachment":[{"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=61"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=61"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vpn.univ-fcomte.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=61"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}