{"id":13826164,"url":"https://github.com/kitten/setup-simple-ipsec-l2tp-vpn","last_synced_at":"2025-12-18T05:20:12.617Z","repository":{"id":18432038,"uuid":"21617853","full_name":"kitten/setup-simple-ipsec-l2tp-vpn","owner":"kitten","description":"Setup a simple IPSec/L2TP VPN Server for Ubuntu and Debian","archived":true,"fork":false,"pushed_at":"2017-12-09T17:34:44.000Z","size":51,"stargazers_count":645,"open_issues_count":11,"forks_count":179,"subscribers_count":45,"default_branch":"master","last_synced_at":"2024-11-20T04:33:34.168Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kitten.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-07-08T15:19:43.000Z","updated_at":"2024-11-14T22:37:35.000Z","dependencies_parsed_at":"2022-08-04T23:30:45.390Z","dependency_job_id":null,"html_url":"https://github.com/kitten/setup-simple-ipsec-l2tp-vpn","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/kitten/setup-simple-ipsec-l2tp-vpn","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kitten%2Fsetup-simple-ipsec-l2tp-vpn","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kitten%2Fsetup-simple-ipsec-l2tp-vpn/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kitten%2Fsetup-simple-ipsec-l2tp-vpn/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kitten%2Fsetup-simple-ipsec-l2tp-vpn/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kitten","download_url":"https://codeload.github.com/kitten/setup-simple-ipsec-l2tp-vpn/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kitten%2Fsetup-simple-ipsec-l2tp-vpn/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264365463,"owners_count":23596838,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T09:01:33.193Z","updated_at":"2025-12-18T05:20:12.539Z","avatar_url":"https://github.com/kitten.png","language":"Shell","funding_links":[],"categories":["\u003ca id=\"d62a971d37c69db9f3b9187318c3921a\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"8ea8f890cf767c3801b5e7951fca3570\"\u003e\u003c/a\u003e公网访问局域网"],"readme":"# Setup a simple IPSec/L2TP VPN server for Ubuntu, Arch Linux and Debian\n\nTested on:\n\n- Digital Ocean: Ubuntu 14.04 x64 (Trusty)\n- Online.net: Arch Linux\n- Amazon Web Services EC2: Arch Linux\n- Amazon Web Services EC2: Ubuntu 14.04 x64 HVM (Trusty)\n\n## **Deprecated!**\n\n[**This script has been deprecated in favor for my other script \"setup-strong-strongswan\"**](https://github.com/philpl/setup-strong-strongswan)\n\nThis script is very fragmented. The other scripts for Arch Linux, CentOS and Fedora\nare not up to date. They are insecure and don't feature a init.d startup and helper\nscript. Furthermore it uses libreswan, which is not as well maintained and documented as strongswan.\n\nFor these and other reasons I updated the strongswan script. It supports both\nIPSec over L2TP and \"pure\" IPSec with the same installation. It is also based on\nmy work on a strongswan docker container, which will be much more regularly\nmaintained as well.\n\n[philpl/setup-strong-strongswan](https://github.com/philpl/setup-strong-strongswan)\n\n## Installation\n\n### For Ubuntu and Debian\n\n```\nwget https://raw.github.com/philpl/setup-simple-ipsec-l2tp-vpn/master/setup.sh\nsudo sh setup.sh\n```\n\n\u003e NOTE: Debian 7 (Wheezy) does not have the newer libnss3 version (\u003e=3.15) that Libreswan requires.\n\u003e The following workaround is required BEFORE running vpnsetup.sh.\n\u003e Thanks to @hwdsl2\n\u003e\n\u003e ```\n\u003e wget https://gist.githubusercontent.com/hwdsl2/5a769b2c4436cdf02a90/raw/e08a04d76240af8acbfe5d6f4e0057c1bf5c660e/vpnsetup-debian-7-workaround.sh\n\u003e sudo sh vpnsetup-debian-7-workaround.sh\n\u003e ```\n\nThis will install a new service called `ipsec-assist`. With it you can safely start, stop and restart the VPN server:\n\n```\nsudo service ipsec-assist stop\nsudo service ipsec-assist start\nsudo service ipsec-assist restart\n```\n\n### For Arch Linux\n\n```\nwget https://raw.github.com/philpl/setup-simple-ipsec-l2tp-vpn/master/setup_archlinux.sh\nsudo sh setup_archlinux.sh\n```\n\n### For Fedora\n\n```\nwget https://raw.github.com/philpl/setup-simple-ipsec-l2tp-vpn/master/setup_fedora.sh\nsudo sh setup_fedora.sh\n```\n\nThe script will lead you through the installation process.\n\nDuring installation you have to enter an IPSec PSK Key, a custom username if you wish, and a password.\n\nPorts `1701`, `500` and `4500` must be opened for the VPN to work!\n\nEnjoy your very own (secure) VPN!\n\n## Some Notes\n\nClients are configured to use Google's Public DNS servers, when\nthe VPN connection is active:\nhttps://developers.google.com/speed/public-dns/\n\nOnly one VPN account is generated!\nTo add more accounts, see the file `/etc/ppp/chap-secrets`\n\n*In the future I might add the ability to generate more accounts.*\n\nBefore connecting with a Windows client please see: [http://support.microsoft.com/kb/926179](http://support.microsoft.com/kb/926179)\n\nIf you plan to keep the VPN server generated with this script on the internet for a\nlong time (a day or more), consider securing it to possible attacks!\n\nIf you run this script on EC2, the IP used in the config files will be different to the instance's public-facing IP. This is because Amazon performs one-to-one NAT on EC2 instances.\n\n## License\n\nCopyright notices and license notes are at the head of the script.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkitten%2Fsetup-simple-ipsec-l2tp-vpn","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkitten%2Fsetup-simple-ipsec-l2tp-vpn","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkitten%2Fsetup-simple-ipsec-l2tp-vpn/lists"}