V2EX › kingwkb 的所有回复 › 第 12 页 / 共 51 页

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

1 ... 8 9 10 11 12 13 14 15 16 17 ... 51

❮

❯

2016-03-23 11:29:03 +08:00

回复了 lhbc 创建的主题 › 分享创造 › 重写了 Ocserv 自动安装脚本，采用 epel 的二进制包(for CentOS 7)

auth = "certificate"
tcp-port = 443
run-as-user = nobody
run-as-group = daemon
socket-file = /var/run/ocserv-socket
server-cert = /etc/ocserv/server-cert.pem
server-key = /etc/ocserv/server-key.pem
ca-cert = /etc/ocserv/ca-cert.pem
isolate-workers = true
max-clients = 16
max-same-clients = 2
keepalive = 32400
dpd = 90
mobile-dpd = 1800
try-mtu-discovery = false
cert-user-oid = 0.9.2342.19200300.100.1.1
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-VERS-SSL3.0"
auth-timeout = 40
min-reauth-time = 300
max-ban-score = 50
ban-reset-time = 300
cookie-timeout = 864000
persistent-cookies = true
deny-roaming = false
rekey-time = 172800
rekey-method = ssl
use-occtl = true
pid-file = /var/run/ocserv.pid
device = vpns
predictable-ips = true
default-domain = example.com
ipv4-network = 192.168.1.0
ipv4-netmask = 255.255.255.0
dns 8.8.8.8
dns 8.8.4.4
ping-leases = false
route = 8.8.8.8/255.255.255.255
route = 8.8.4.4/255.255.255.255
route = 64.18.0.0/255.255.240.0
route = 64.233.160.0/255.255.224.0
route = 66.102.0.0/255.255.240.0
route = 66.249.80.0/255.255.240.0
route = 72.14.192.0/255.255.192.0
route = 74.125.0.0/255.255.0.0
route = 108.177.8.0/255.255.248.0
route = 173.194.0.0/255.255.0.0
route = 207.126.144.0/255.255.248.0
route = 209.85.128.0/255.255.128.0
route = 216.58.192.0/255.255.224.0
route = 216.239.32.0/255.255.224.0
route = 104.244.42.0/255.255.255.0
route = 192.133.76.0/255.255.252.0
route = 199.16.156.0/255.255.252.0
route = 199.59.148.0/255.255.252.0
route = 199.96.58.0/255.255.254.0
route = 199.96.62.0/255.255.254.0
cisco-client-compat = true

2016-03-23 11:25:19 +08:00

回复了 lhbc 创建的主题 › 分享创造 › 重写了 Ocserv 自动安装脚本，采用 epel 的二进制包(for CentOS 7)

全部配置
auth = "certificate"
tcp-port = 443
run-as-group = daemon
server-key = /etc/ocserv/server-key.pem
ca-cert = /etc/ocserv/ca-cert.pem
isolate-workers = true
min-reauth-time = 300
use-occtl = true
ipv4-netmask = 255.255.255.0
dns 8.8.8.8
dns 8.8.4.4
ping-leases = false
route = 8.8.4.4/255.255.255.255
route = 64.18.0.0/255.255.240.0
route = 64.233.160.0/255.255.224.0
route = 66.102.0.0/255.255.240.0
route = 66.249.80.0/255.255.240.0
route = 72.14.192.0/255.255.192.0
route = 74.125.0.0/255.255.0.0
route = 108.177.8.0/255.255.248.0
route = 173.194.0.0/255.255.0.0
route = 207.126.144.0/255.255.248.0
route = 209.85.128.0/255.255.128.0
route = 216.58.192.0/255.255.224.0
route = 216.239.32.0/255.255.224.0
route = 192.133.76.0/255.255.252.0
route = 199.16.156.0/255.255.252.0
route = 199.59.148.0/255.255.252.0
route = 199.96.58.0/255.255.254.0
route = 199.96.62.0/255.255.254.0
cisco-client-compat = true

2016-03-23 09:15:12 +08:00

回复了 lhbc 创建的主题 › 分享创造 › 重写了 Ocserv 自动安装脚本，采用 epel 的二进制包(for CentOS 7)

Android 几天不掉线都没问题，应该是掉了会重连

2016-03-23 09:14:27 +08:00

回复了 lhbc 创建的主题 › 分享创造 › 重写了 Ocserv 自动安装脚本，采用 epel 的二进制包(for CentOS 7)

keepalive = 32400
cookie-timeout = 864000
persistent-cookies = true
deny-roaming = false
rekey-time = 172800

2016-03-23 06:29:42 +08:00

回复了 lhbc 创建的主题 › 分享创造 › 重写了 Ocserv 自动安装脚本，采用 epel 的二进制包(for CentOS 7)

我的 iOS Anyconnect 连接 Ocserv ，总是掉线不会重新连接怎么办？

2016-03-14 09:44:06 +08:00

回复了 liuyanjun0826 创建的主题 › 问与答 › 有人经历过 LASEK 手术吗？我星期五要做， 4500，有什么要注意的吗？

失败的比例非常小不代表风险就小