mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2025-02-07 07:49:25 +03:00
Code Issues Projects Releases Wiki Activity

Browse Source
This commit is contained in:
Lin Song 2015-07-23 12:49:02 -05:00
parent d541f0d9b4
commit ec06bfae19
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
vpnsetup.sh
View File

@ -70,8 +70,8 @@ echo 'the next two lines PUBLIC_IP= and PRIVATE_IP=, OR replace them with the ac
# For all other servers, you may replace them with the actual IPs,
# or comment out and let the script auto-detect in the next section
# If your server only has a public IP, use that IP on both lines
PUBLIC_IP=$(wget --timeout 10 -q -O - 'http://169.254.169.254/latest/meta-data/public-ipv4')
PRIVATE_IP=$(wget --timeout 10 -q -O - 'http://169.254.169.254/latest/meta-data/local-ipv4')
PUBLIC_IP=$(wget --retry-connrefused --tries=3 --timeout 15 -qO- 'http://169.254.169.254/latest/meta-data/public-ipv4')
PRIVATE_IP=$(wget --retry-connrefused --tries=3 --timeout 15 -qO- 'http://169.254.169.254/latest/meta-data/local-ipv4')
# Attempt to find Public IP and Private IP automatically for non-EC2 servers
[ "$PUBLIC_IP" = "" ] && PUBLIC_IP=$(dig +short myip.opendns.com @resolver1.opendns.com)
@ -88,14 +88,16 @@ apt-get -y install xl2tpd
# Compile and install Libreswan (https://libreswan.org/)
# To upgrade Libreswan when a newer version is available, just re-run these
# six commands with the new download link, and then restart services with
# eight commands with the new "SWAN_VER", and then restart services with
# "service ipsec restart" and "service xl2tpd restart".
mkdir -p /opt/src
cd /opt/src
wget -qO- https://download.libreswan.org/libreswan-3.13.tar.gz | tar xvz
cd libreswan-3.13
make programs
make install
SWAN_VER=3.13
SWAN_URL=https://download.libreswan.org/libreswan-${SWAN_VER}.tar.gz
wget --retry-connrefused --tries=3 --timeout 15 -qO- $SWAN_URL | tar xvz
[ ! -d libreswan-${SWAN_VER} ] && { echo "Could not retrieve the Libreswan source file. Aborting."; exit; }
cd libreswan-${SWAN_VER}
make programs && make install
# Prepare various config files
cat > /etc/ipsec.conf <<EOF