discountry / setup-simple-ipsec-l2tp-vpn

Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian

Setup a simple IPSec/L2TP VPN server for Ubuntu, Arch Linux and Debian

NOTE: As far as I know, IPSec/L2TP is considered to be one of the most secure protocols! Still I cannot guarantee 100% security!

https://www.ivpn.net/pptp-vs-l2tp-vs-openvpn

Script has been tested on:

• Digital Ocean: Ubuntu 14.04 x64 (Trusty)
• Online.net: Arch Linux
• Amazon Web Services EC2: Arch Linux
• Amazon Web Services EC2: Ubuntu 14.04 x64 HVM (Trusty)

Feel free to test it on more distributions and please report back to me!

Copyright (C) 2014 Phil Plückthun [email protected]
Adapting script for Arch Linux - Dennis Anfossi [email protected]
Fixing up some code - Edwin Ang <@theroyalstudent>

Based on the work of Lin Song (Copyright 2014)
Based on the work of Viljo Viitanen (Setup Simple PPTP VPN server for Ubuntu and Debian) Based on the work of Thomas Sarlandie (Copyright 2012)

Installation

For Ubuntu and Debian

wget https://raw.github.com/philplckthun/setup-simple-ipsec-l2tp-vpn/master/setup.sh
sudo sh setup.sh

For Arch Linux

wget https://raw.github.com/philplckthun/setup-simple-ipsec-l2tp-vpn/master/setup_archlinux.sh
sudo sh setup_archlinux.sh

For Fedora

wget https://raw.github.com/philplckthun/setup-simple-ipsec-l2tp-vpn/master/setup_fedora.sh
sudo sh setup_fedora.sh

The script will lead you through the installation process.

During installation you have to enter an IPSec PSK Key, a custom username if you wish, and a password.

Ports 1701, 500 and 4500 must be opened for the VPN to work!

Enjoy your very own (secure) VPN!

Some Notes

Clients are configured to use Google's Public DNS servers, when the VPN connection is active: https://developers.google.com/speed/public-dns/

Only one VPN account is generated! To add more accounts, see the file /etc/ppp/chap-secrets

In the future I might add the ability to generate more accounts.

If you plan to keep the VPN server generated with this script on the internet for a long time (a day or more), consider securing it to possible attacks!

If you run this script on EC2, the IP used in the config files will be different to the instance's public-facing IP. This is because Amazon performs one-to-one NAT on EC2 instances.