Vultr CentOS6 部署 PPTP + L2TP/IPSec 一键包教程

wget http://www.hi-vps.com/shell/vpn_centos6.sh
chmod a+x vpn_centos6.sh
bash vpn_centos6.sh

wget --no-check-certificate https://raw.githubusercontent.com/teddysun/across/master/l2tp.sh
chmod +x l2tp.sh
./l2tp.sh

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.38/K2.6.32-504.23.4.el6.x86_64 (netkey)
Checking for IPsec support in kernel [OK]
SAref kernel support [N/A]
NETKEY: Testing XFRM related proc values [OK]
[OK]
[OK]
Hardware RNG detected, testing if used properly [FAILED]
Hardware RNG is present but ‘rngd’ or ‘clrngd’ is not running.
No harware random used!
Checking that pluto is running [OK]
Pluto listening for IKE on udp 500 [OK]
Pluto listening for NAT-T on udp 4500 [OK]
Checking for ‘ip’ command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for ‘iptables’ command [OK]
Opportunistic Encryption Support [DISABLED]

Hardware RNG detected, testing if used properly [FAILED]

1.安装rng-tools
yum install rng-tools
2.修改 /etc/sysconfig/rngd
EXTRAOPTIONS=”-r /dev/urandom”
3.chkconfig rngd on
4.service rngd restart

ipsec setup restart
xl2tpd -D
ipsec verify

# Generated by iptables-save v1.4.7 on Sat Nov 21 01:25:13 2015
*filter
:INPUT ACCEPT [1:40]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:140]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -p icmp -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT 
-A FORWARD -s 172.16.36.0/24 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j TCPMSS --set-mss 1356 
COMMIT
# Completed on Sat Nov 21 01:25:13 2015
# Generated by iptables-save v1.4.7 on Sat Nov 21 01:25:13 2015
*nat
:PREROUTING ACCEPT [1178:51788]
:POSTROUTING ACCEPT [91:8584]
:OUTPUT ACCEPT [91:8584]
-A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source 你.的.I.P 
-A POSTROUTING -j MASQUERADE 
COMMIT
# Completed on Sat Nov 21 01:25:13 2015

username * password *