Stunnel.org  
   
Home
About
News
Faq
Examples
Download
Patches
Support
Related
<Examples>

Setting up PPP over stunnel (Make your own VPN)

(Obligatory plug) If you want extreemly detailed step-by-step directions, you may want to pick up a copy of Building Linux VPNs written by yours truely, which covers a very robust, scalable, and configurable PPP over Stunnel setup. I wish I could include it here, but the publisher decided to allow chapter 1 to be put on the web, unfortunately.

  • Set up your ppp configuration as you would if you were just using a normal dialup connection, including any passwords required.

    There is no step-by-step description I can give for you here, as this is different from OS to OS. Working submissions encouraged.

  • Read about setting up stunnel on the previous pages.
  • Set up stunnel on the server in either daemon or inetd mode with the following meta-arguments:
    	(stunnel) (stunnel args)  -L /dir/to/pppd -- pppd (pppd args) local passive
    	
    for example
    	stunnel -d 5555 -v 1 -D 7 -L /usr/sbin/pppd -- pppd 10.0.0.1: noauth local passive
    	

  • Run stunnel on the client with the following meta-arguments:
    	(stunnel) (stunnel args)  -L /dir/to/pppd -- pppd (pppd args) local passive
    	
    for example
    	stunnel -c -r remote:5555 -D 7 -L /usr/sbin/pppd -- pppd 10.0.0.2: noauth local passive
    	

You could also look at this URL (appears to be dead now) which describes setting up ppp over an ssh connection. Setting up ppp over stunnel is similar.

If anyone has more specific implementations they'd like to share, complete with how to set up pppd on your OS), please inform the Webmaster and I'll make them available.

  • You can view this very detailed writeup. (It's in German, but Babelfish is your friend.)
  •