l2tp static ip: enterprise-class VPN proxy configuration process analysis

Teach you how to use l2tp to build enterprise-class static ip channel

Recently, many friends who do data collection have complained to me, saying that they always encounter ip blocking with ordinary proxies. In fact, this is the time to consider onStatic residential ipThe first step is to use the l2tp protocol to do enterprise-level deployment, stability directly pull full. Today we take our ipipgo static resources to demonstrate, to ensure that you can get started after reading.

Don't be sloppy with your preparations.

Let's start by identifying three key things:
1. Ask ipipgo customer service to open aStatic Home Package(Remember to say business use)
2. Prepare a linux server as a springboard (centos/ubuntu is fine)
3. Memorize the three sets of parameters given by the customer service:

Server address: vpn.ipipgo.net
Pre-shared key: Zx9kL2!qP
Account Password: user2024 / T5m$vU7e

Server-Side Configuration

Take centos7 for example, install xl2tpd never use the default source:

yum install epel-release -y
yum install xl2tpd ppp -y

Change the configuration file to watch out for these potholes:
- /etc/xl2tpd/xl2tpd.confRiga:

[lns default]
ip range = 172.16.1.100-200
local ip = 172.16.1.1

- /etc/ppp/options.xl2tpdTail additions:

require-mschap-v2
ms-dns 8.8.8.8
proxyarp

Client Connection Tips

Windows users look here:
1. New in network settingsvpn connection
2. Type select "Use pre-shared key".
3. Check in the advanced settingsCHAPrespond in singingMS-CHAP v2
Here's the point:In Properties-Security, change the data encryption to "Optional Encryption", otherwise it won't connect!

Mandatory connectivity testing

Don't rush it once it's connected, run these three checks first:

Guidelines on demining of common problems

Q: Connected to vpn but can't access the internet?
A: Ninety percent are routing table conflicts, tryip route replace default dev ppp0

Q: How to realize multi-device sharing?
A: In the ipipgo console point "device management" - "new authorization", do not blindly change the configuration on the server side!

Q: What should I do if my traffic consumption is abnormal?
A: 80% is not turn off the local update, set windows update/antivirus software update to manual

Why choose ipipgo's static resources?

Data from three months of real-world testing of your own program:

Especially theirCarrier-grade nat penetrationtechnology, faster than the conventional program 40% more than. When you encounter a program with a large collection volume, remember to chooseStatic Home Package, 35 bucks for an ip that lasts a full 30 days is a much better deal than dynamic.

One last reminder: after configuration, remember to change xl2tpd's default port 1701 to a non-usable port, using theiptables -A INPUT -p udp --dport 54321 -j ACCEPTThis way of writing, security and stability can be improved by several levels.