Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Trace:
сервисы_gateway_и_routing

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
сервисы_gateway_и_routing [2020/04/13 07:58]
val [NetFilter iproute2 (Linux)] 		сервисы_gateway_и_routing [2024/06/24 05:41] (current)
val [Протокол OSPF]
Line 4: Line 4:
  
 ===== Gateway ===== ===== Gateway =====
- 
-==== FreeBSD ==== 
-<​code>​ 
-[gate:~] # sysctl net.inet.ip.forwarding 
- 
-[gate:~] # sysctl net.inet.ip.forwarding=1 
- 
-[gate:~] # cat /​etc/​rc.conf 
-</​code><​code>​ 
-... 
-gateway_enable="​YES"​ 
-... 
-</​code><​code>​ 
-[gate:~] # /​etc/​rc.d/​routing restart 
-</​code>​ 
  
 ==== Debian/​Ubuntu ==== ==== Debian/​Ubuntu ====
Line 28: Line 13:
 net.ipv4.ip_forward = 1 net.ipv4.ip_forward = 1
  
-root@gate:​~#​ cat /​etc/​sysctl.conf+root@gate:​~#​ cat /etc/sysctl.d/​20-my-forward.conf
 </​code><​code>​ </​code><​code>​
-... 
 net.ipv4.ip_forward=1 net.ipv4.ip_forward=1
-... 
 </​code><​code>​ </​code><​code>​
-root@gate:​~#​ sysctl -f+root@gate:​~#​ sysctl -p --system ​
 </​code>​ </​code>​
- 
-===== Управление таблицей маршрутизации ===== 
  
 ==== FreeBSD ==== ==== FreeBSD ====
 <​code>​ <​code>​
-[gate:~] # netstat -rn -f inet+[gate:~] # sysctl net.inet.ip.forwarding
  
-[gate:~] # route delete default+[gate:~] # sysctl net.inet.ip.forwarding=1
  
-[gate:~] # route add default 172.16.1.254 +[gate:~] # cat /etc/rc.conf 
- +</​code><​code>​ 
-[gate:~] # route add 192.168.Y/24 172.16.1.Y +... 
- +gateway_enable="​YES"​ 
-[gate:~] # route delete 192.168.Y/24 +... 
-delete net 192.168.Y.0 +</​code><​code>​ 
- +[gate:~] # /​etc/​rc.d/​routing restart
-[gate:~] # route -n flush+
 </​code>​ </​code>​
 +
 +===== Управление таблицей маршрутизации =====
  
 ==== Linux ==== ==== Linux ====
Line 62: Line 44:
 # ip route help # ip route help
  
-# ip r add 192.168.Y.0/​24 via 172.16.1.Y+gate.isp.un# ip r add 192.168.Y.0/​24 via 172.16.1.Y 
 + 
 +gate#  
 +ip r add 192.168.110.0/​24 via 192.168.X.201 
 +ip r add 192.168.120.0/​24 via 192.168.X.202 
 +ip r add 192.168.130.0/​24 via 192.168.X.203 
 + 
 +# ip r del 192.168.Y.0/​24 
 + 
 +ip route add|del blackhole|unreachable 192.168.100+X.201
 </​code>​ </​code>​
  
Line 83: Line 74:
 # route del -host 192.168.100+X.201 reject # route del -host 192.168.100+X.201 reject
 </​code>​ </​code>​
- 
-===== Добаление статических маршрутов на этапе загрузки ===== 
  
 ==== FreeBSD ==== ==== FreeBSD ====
 <​code>​ <​code>​
-[gate:~] # cat /​etc/​rc.conf +[gate:~] # netstat -rn -f inet 
-</​code><​code>​ + 
-... +[gate:~] # route delete default 
-defaultrouter="​172.16.1.254" + 
-gateway_enable="​YES"​ +[gate:~] # route add default ​172.16.1.254 
-static_routes="​netY netZ"​ + 
-route_netY="​192.168.Y.0/24 172.16.1.Y" +[gate:~] # route add 192.168.Y/​24 172.16.1.Y 
-route_netZ="​192.168.Z.0/24 172.16.1.Z"​ + 
-... +[gate:~] # route delete ​192.168.Y/24 
-</​code><​code>​ +delete net 192.168.Y.0 
-[gate:~] # /​etc/​rc.d/​routing start+ 
 +[gate:~] # route -n flush
 </​code>​ </​code>​
 +
 +===== Добаление статических маршрутов на этапе загрузки =====
  
 ==== Debian/​Ubuntu ==== ==== Debian/​Ubuntu ====
 +
 +  * [[https://​linuxconfig.org/​how-to-add-static-route-with-netplan-on-ubuntu-20-04-focal-fossa-linux|How to add static route with netplan]]
 +
 <​code>​ <​code>​
 root@gate:​~#​ cat /​etc/​network/​interfaces root@gate:​~#​ cat /​etc/​network/​interfaces
Line 116: Line 111:
 192.168.Y.0/​24 via 172.16.1.Y dev eth1 192.168.Y.0/​24 via 172.16.1.Y dev eth1
 </​code>​ </​code>​
 +==== FreeBSD ====
 +<​code>​
 +[gate:~] # cat /​etc/​rc.conf
 +</​code><​code>​
 +...
 +defaultrouter="​172.16.1.254"​
 +gateway_enable="​YES"​
 +static_routes="​netY netZ"
 +route_netY="​192.168.Y.0/​24 172.16.1.Y"​
 +route_netZ="​192.168.Z.0/​24 172.16.1.Z"​
 +...
 +</​code><​code>​
 +[gate:~] # /​etc/​rc.d/​routing start
 +</​code>​
 +
 ===== Динамические протоколы маршрутизации ===== ===== Динамические протоколы маршрутизации =====
  
Line 122: Line 132:
 ==== Протокол OSPF ==== ==== Протокол OSPF ====
  
-=== Установка ​===+=== frr === 
 + 
 +  * [[https://​docs.frrouting.org/​en/​latest/​setup.html]]
  
-=== FreeBSD === 
 <​code>​ <​code>​
-[gate:​~] ​# pkg install ​quagga+# apt install ​frr
  
-[gate:​~] ​# cd /usr/local/etc/quagga/+# cat /etc/frr/daemons 
 +</code><​code>​ 
 +... 
 +ospfd=yes 
 +... 
 +</code><​code>​ 
 +# systemctl restart frr 
 + 
 +# ps ax | grep frr 
 + 
 +# vtysh 
 +... 
 +# show run
 </​code>​ </​code>​
 +
 +=== quagga ===
  
 === Debian/​Ubuntu === === Debian/​Ubuntu ===
Line 152: Line 177:
 enable password zebra enable password zebra
 </​code>​ </​code>​
- 
-=== Запуск === 
  
 === FreeBSD === === FreeBSD ===
 <​code>​ <​code>​
-[gate:~] # cat /​etc/​rc.conf +[gate:~] # pkg install quagga 
-</​code><​code>​ + 
-... +[gate:~] # cd /​usr/​local/​etc/​quagga/
-quagga_enable="​YES"​ +
-quagga_daemons="​zebra ospfd"​ +
-</​code><​code>​ +
-[gate:~] # /​usr/​local/​etc/rc.d/​quagga ​start+
 </​code>​ </​code>​
  
-=== Debian ===+=== Запуск === 
 + 
 +=== Debian/​Ubuntu ​===
 <​code>​ <​code>​
 # service zebra start # service zebra start
Line 173: Line 194:
 </​code>​ </​code>​
  
-=== Ubuntu ​===+=== FreeBSD ​===
 <​code>​ <​code>​
-root@gate:~# cat /etc/quagga/​daemons+[gate:~] # cat /etc/rc.conf
 </​code><​code>​ </​code><​code>​
 ... ...
-zebra=yes +quagga_enable="​YES"​ 
-... +quagga_daemons="​zebra ​ospfd"
-ospfd=yes +
-...+
 </​code><​code>​ </​code><​code>​
-root@gate:​~# ​chown -R quagga ​/etc/quagga/ +[gate:~] # /usr/local/etc/rc.d/quagga start
- +
-root@gate:​~#​ service ​quagga start+
 </​code>​ </​code>​
  
Line 266: Line 283:
 # ip route show table all  #​Записи таблицы main отображаются без имени # ip route show table all  #​Записи таблицы main отображаются без имени
  
 +# ip route show
 # ip route show table main  #Все пакеты,​ для которых нет правил,​ обрабатываются маршрутами таблицы main # ip route show table main  #Все пакеты,​ для которых нет правил,​ обрабатываются маршрутами таблицы main
  
Line 278: Line 296:
 # ip route show table all | grep 'table 10[12]'​ # ip route show table all | grep 'table 10[12]'​
  
-# ip rule add from 192.168.X.0/​25 table 101 +# ip rule show 
-# ip rule add from 192.168.X.128/25 table 102 + 
-# ip rule add from 192.168.X.0/24 to 192.168.X.0/​24 ​table main+# ip rule add prio 100 from 192.168.X.0/​24 to 192.168.X.0/​24 ​table main 
 +# ip rule add prio 200 from 192.168.X.0/25 table 101 
 +# ip rule add prio 300 from 192.168.X.128/25 table 102
  
 # ip rule show # ip rule show
  
-# ip rule del from 192.168.X.0/24 to 192.168.X.0/24 table main +# ip rule del prio 300 
-# ip rule del from any table 101 +# ip rule del prio 200 
-# ip rule del from any table 102+# ip rule del prio 100 
 + 
 +# ip route del default via 172.16.1.254 table 101 
 +# ip route del default via 172.16.2.254 table 102 
 + 
 +# ip route flush table 101 
 +# ip route flush table 102
 </​code>​ </​code>​
  
Line 296: Line 322:
  
 iptables -t nat -A POSTROUTING -o eth1 -s 192.168.X.0/​24 -j SNAT --to-source 172.16.1.X iptables -t nat -A POSTROUTING -o eth1 -s 192.168.X.0/​24 -j SNAT --to-source 172.16.1.X
-iptables -t nat -A POSTROUTING -o eth3 -s 192.168.X.0/​24 -j SNAT --to-source 172.16.2.X+iptables -t nat -A POSTROUTING -o eth2 -s 192.168.X.0/​24 -j SNAT --to-source 172.16.2.X
  
 conntrack -F conntrack -F
Line 312: Line 338:
         post-up ip rule add prio 100 from 192.168.X.0/​24 to 192.168.X.0/​24 table main         post-up ip rule add prio 100 from 192.168.X.0/​24 to 192.168.X.0/​24 table main
         post-up ip rule add prio 200 from 192.168.X.0/​25 table 101         post-up ip rule add prio 200 from 192.168.X.0/​25 table 101
-        post-up ip rule add prio 200 from 192.168.X.128/​25 table 102+        post-up ip rule add prio 300 from 192.168.X.128/​25 table 102
         ​         ​
         address 192.168.X.1         address 192.168.X.1
сервисы_gateway_и_routing.1586753927.txt.gz · Last modified: 2020/04/13 07:58 by val

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Run on Debian Driven by DokuWiki