f******e
发帖数: 206 | 1 长周末在家装上了VPN，这样就不用把服务器暴露在DMZ里了。以下步骤，仅供参考。
Step 1 - Preparation on Mac mini
1. Search OS X Server in App Store
2. Make payment ($19.99) then download/install
3. Set Mac mini's IP to static in home router admin webpage, e.g. 10.0.0.8
Step 2 - Configure Public Domain
1. Open 1and1 control panel
2. Create subdomain, e.g. vpn.mydomain.com
3. Edit subdomain's DNS setting by set A-Record IP to home router's public
IP
Step 3 - Config OS X Server
1. Enable VPN in Server app
2. Set VPN type to L2TP
3. VPN Host name to above public one, vpn.mydomain.com
4. Type in your own shared secret, e.g. abcd001
5. Set Mac mini's IP (10.0.0.8) in DNS Settings as Name Server
6. Turn on VPN Server by click OFF/ON at top
7. Choose Save Configuration Profile, and save to local then email self
8. Add more user under Accounts->Users
Step 4 - Config Home Router
1. Open home router admin webpage
2. Under Port Forwarding, add blow 4 entries,
Name Type IP Address Port
VPN-TCP-1723 TCP 10.0.0.8 1723
VPN-UDP-500 UDP 10.0.0.8 500
VPN-UDP-1701 UDP 10.0.0.8 1701
VPN-UDP-4500 UDP 10.0.0.8 4500
3. Reboot home router
Step 5 - Config Websites Server
1. Enable Websites in OS X Server
2. Enable PHP
3. Create index.php in specified Webserver folder with below contents,
phpinfo();
/>
4. Turn on Websites Server
Step 6 - Configure iPhone
1. Email the Configuration Profile mentioned above to iPhone
2. Open the attached file on iPhone
3. At "Install Profile" UI, tap Install
4. Supply username and passwrod
5. Go to Settings->General->VPN, and turn on it
6. Open Safari and open page at 10.0.0.8 to test
Step 7 - Configure Macbook
1. System Preferences->Network
2. Add new VPN: myVPN
Server Address: vpn.mydomain.com
Account Name: myusername
Authentication Settings
Passwrod: mypassword
Shared Secret: abcd001
3. Check "Show VPN status in menu bar"
4. Click the icon in menu bar, "Connect myVPN" | a***y
发帖数: 19743 | 2 if using AirPort then you do not need to manually configure router.
Also you have to turn off Back to my Mac on Mac mini for VPN to work, due to
port conflict.
【在 f******e 的大作中提到】
: 长周末在家装上了VPN，这样就不用把服务器暴露在DMZ里了。以下步骤，仅供参考。
: Step 1 - Preparation on Mac mini
: 1. Search OS X Server in App Store
: 2. Make payment ($19.99) then download/install
: 3. Set Mac mini's IP to static in home router admin webpage, e.g. 10.0.0.8
: Step 2 - Configure Public Domain
: 1. Open 1and1 control panel
: 2. Create subdomain, e.g. vpn.mydomain.com
: 3. Edit subdomain's DNS setting by set A-Record IP to home router's public
: IP
| f******e
发帖数: 206 | 3 我没有AirPort，所以就这样配置了。另外，有两个问题想请教，
1. 如果home router public IP地址变了，想通过邮件通知，记得在Ubuntu里很容易就
配好了，就一行命令，Mac里面怎么配，能用一行命令搞定吗？
一行最好了，这样我就可以拷贝到Webmin里，设置一个cron task，每天发送最新
IP。
2. Server里还有两个tomcat的服务，分别在8080和8090端口上，怎样配置DNS和
Website Server，使其能通过子域名访问，而不是端口访问？
比如不是通过http://mydomain.com:8080访问，而是通过http://service1.mydomain.com。试过Redirect，端口最后还是要出来，不是想要的效果。也试过ProxyPass，没成功。 |
|
