Commit 582a48bf6f33237a29780f9eec04c2186106144c
1 parent
a109a4a0fa
Exists in
master
typo nama file vpnc-script.patched
Showing 1 changed file with 1 additions and 1 deletions Inline Diff
vpnc-setup.sh
1 | #!/bin/bash | 1 | #!/bin/bash |
2 | 2 | ||
3 | echo | 3 | echo |
4 | echo ================ | 4 | echo ================ |
5 | echo Tektrans - Finnet AD2MT VPNC configurator | 5 | echo Tektrans - Finnet AD2MT VPNC configurator |
6 | echo ================ | 6 | echo ================ |
7 | echo | 7 | echo |
8 | 8 | ||
9 | read -p 'VPNC username: ' vpncuser < /dev/tty | 9 | read -p 'VPNC username: ' vpncuser < /dev/tty |
10 | if [ -z "$vpncuser" ]; then | 10 | if [ -z "$vpncuser" ]; then |
11 | echo "Invalid vpnc user"; | 11 | echo "Invalid vpnc user"; |
12 | exit | 12 | exit |
13 | fi | 13 | fi |
14 | 14 | ||
15 | read -p 'VPNC password: ' vpncpass < /dev/tty | 15 | read -p 'VPNC password: ' vpncpass < /dev/tty |
16 | if [ -z "$vpncpass" ]; then | 16 | if [ -z "$vpncpass" ]; then |
17 | echo "Invalid vpnc password"; | 17 | echo "Invalid vpnc password"; |
18 | exit | 18 | exit |
19 | fi | 19 | fi |
20 | 20 | ||
21 | read -p 'IPSEC secret: ' ipsecsecret < /dev/tty | 21 | read -p 'IPSEC secret: ' ipsecsecret < /dev/tty |
22 | if [ -z "$ipsecsecret" ]; then | 22 | if [ -z "$ipsecsecret" ]; then |
23 | echo "Invalid ipssec secret"; | 23 | echo "Invalid ipssec secret"; |
24 | exit | 24 | exit |
25 | fi | 25 | fi |
26 | 26 | ||
27 | 27 | ||
28 | set -x | 28 | set -x |
29 | 29 | ||
30 | sudo yum -y install vpnc | 30 | sudo yum -y install vpnc |
31 | sed 2iINTERNAL_IP4_DNS= /etc/vpnc/vpnc-script | sudo tee /etc/vpnc-script.patched | 31 | sed 2iINTERNAL_IP4_DNS= /etc/vpnc/vpnc-script | sudo tee /etc/vpnc/vpnc-script.patched |
32 | sudo mv /etc/vpnc/vpnc-script.patched /etc/vpnc/vpnc-script | 32 | sudo mv /etc/vpnc/vpnc-script.patched /etc/vpnc/vpnc-script |
33 | 33 | ||
34 | sudo tee /etc/systemd/system/vpnc@.service << EOF | 34 | sudo tee /etc/systemd/system/vpnc@.service << EOF |
35 | [Unit] | 35 | [Unit] |
36 | Description=VPNC Client %i | 36 | Description=VPNC Client %i |
37 | After=syslog.target network.target | 37 | After=syslog.target network.target |
38 | StartLimitIntervalSec=0 | 38 | StartLimitIntervalSec=0 |
39 | 39 | ||
40 | [Service] | 40 | [Service] |
41 | Type=simple | 41 | Type=simple |
42 | ExecStart=/usr/sbin/vpnc --no-detach --ifname tun-%i %i | 42 | ExecStart=/usr/sbin/vpnc --no-detach --ifname tun-%i %i |
43 | Restart=always | 43 | Restart=always |
44 | User=root | 44 | User=root |
45 | Group=root | 45 | Group=root |
46 | RestartSec=2 | 46 | RestartSec=2 |
47 | 47 | ||
48 | [Install] | 48 | [Install] |
49 | WantedBy=multi-user.target | 49 | WantedBy=multi-user.target |
50 | EOF | 50 | EOF |
51 | 51 | ||
52 | sudo tee /etc/vpnc/ad2mt.conf << EOF | 52 | sudo tee /etc/vpnc/ad2mt.conf << EOF |
53 | IPSec gateway vpn.finnet.co.id | 53 | IPSec gateway vpn.finnet.co.id |
54 | IPSec ID ad2mt | 54 | IPSec ID ad2mt |
55 | Domain WORKGROUP | 55 | Domain WORKGROUP |
56 | Vendor cisco | 56 | Vendor cisco |
57 | NAT Traversal Mode natt | 57 | NAT Traversal Mode natt |
58 | IKE DH Group dh2 | 58 | IKE DH Group dh2 |
59 | Perfect Forward Secrecy server | 59 | Perfect Forward Secrecy server |
60 | Local Addr 0.0.0.0 | 60 | Local Addr 0.0.0.0 |
61 | Local Port 500 | 61 | Local Port 500 |
62 | Cisco UDP Encapsulation Port 10000 | 62 | Cisco UDP Encapsulation Port 10000 |
63 | DPD idle timeout (our side) 300 | 63 | DPD idle timeout (our side) 300 |
64 | IKE Authmode psk | 64 | IKE Authmode psk |
65 | IPSEC target network 0.0.0.0/0.0.0.0 | 65 | IPSEC target network 0.0.0.0/0.0.0.0 |
66 | EOF | 66 | EOF |
67 | 67 | ||
68 | echo Xauth username $vpncuser | sudo tee -a /etc/vpnc/ad2mt.conf | 68 | echo Xauth username $vpncuser | sudo tee -a /etc/vpnc/ad2mt.conf |
69 | echo Xauth password $vpncpass | sudo tee -a /etc/vpnc/ad2mt.conf | 69 | echo Xauth password $vpncpass | sudo tee -a /etc/vpnc/ad2mt.conf |
70 | echo IPSec secret $ipsecsecret | sudo tee -a /etc/vpnc/ad2mt.conf | 70 | echo IPSec secret $ipsecsecret | sudo tee -a /etc/vpnc/ad2mt.conf |
71 | 71 | ||
72 | sudo systemctl daemon-reload | 72 | sudo systemctl daemon-reload |
73 | sudo systemctl enable vpnc@ad2mt | 73 | sudo systemctl enable vpnc@ad2mt |
74 | sudo systemctl restart vpnc@ad2mt | 74 | sudo systemctl restart vpnc@ad2mt |
75 | 75 | ||
76 | echo | 76 | echo |
77 | cat /etc/vpnc/ad2mt.conf | 77 | cat /etc/vpnc/ad2mt.conf |
78 | 78 |