陕西省住房和城乡建设厅网站上怎么打印证书,中盛客户管理软件,常德烟机网站,wordpress 主题logo1.拓扑图#xff1a; 备注#xff1a;因为应用原因#xff0c;需要在linux2上添加一个公网地址#xff0c;并且在中间路由设备不受控制的情况下#xff0c;Linux1能访问到linux2上面的公网地址。2.基本接口配置#xff1a;linux1:192.168.10.1/24linux2:192.168.20.2/24R…1.拓扑图 备注因为应用原因需要在linux2上添加一个公网地址并且在中间路由设备不受控制的情况下Linux1能访问到linux2上面的公网地址。2.基本接口配置linux1:192.168.10.1/24linux2:192.168.20.2/24R1:interface FastEthernet0/0ip address 192.168.10.10 255.255.255.0no shutdown!interface FastEthernet0/1ip address 192.168.20.10 255.255.255.0no shutdown3.路由配置linux1网关:192.168.10.10linux2网关:192.168.20.10R1只有直连路由4.Linux2单网卡多地址配置[rootLinux1 ~]# cp /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/sysconfig/network-scripts/ifcfg-eth0:0[rootLinux1 ~]# vi /etc/sysconfig/network-scripts/ifcfg-eth0:0# Advanced Micro Devices [AMD] 79c970 [PCnet32 LANCE]DEVICEeth0:0BOOTPROTOnoneONBOOTyesHWADDR00:0c:29:08:48:63NETMASK255.255.255.252IPADDR202.100.2.2TYPEEthernetUSERCTLnoIPV6INITnoPEERDNSyes[rootLinux1 ~]# service network restart[rootLinux1 ~]# ping 202.100.2.2PING 202.100.2.2 (202.100.2.2) 56(84) bytes of data.64 bytes from 202.100.2.2: icmp_seq1 ttl64 time0.124 ms--- 202.100.2.2 ping statistics ---1 packets transmitted, 1 received, 0% packet loss, time 0msrtt min/avg/max/mdev 0.124/0.124/0.124/0.000 ms[rootams ~]# ping 192.168.10.10PING 192.168.10.10 (192.168.10.10) 56(84) bytes of data.64 bytes from 192.168.10.10: icmp_seq1 ttl255 time70.6 ms--- 192.168.10.10 ping statistics ---1 packets transmitted, 1 received, 0% packet loss, time 0msrtt min/avg/max/mdev 70.629/70.629/70.629/0.000 ms5.GRE tunnel配置A.确定是否加载了GRE模块[rootLinux1 ~]# lsmod |grep ip_gre[rootLinux2 ~]# lsmod |grep ip_greB.加载GRE模块[rootlinux1 ~]# uname -anLinux linux1 2.6.9-78.EL#1 Wed Jul 9 15:27:01 EDT 2008 i686 i686 i386 GNU/Linux[rootlinux1 ~]# insmod /lib/modules/2.6.9-78.EL/kernel/net/ipv4/ip_gre.ko[rootlinux2 ~]# uname -anLinux linux2 2.6.18-164.el5 #1 SMP Thu Sep 3 03:33:56 EDT 2009 i686 i686 i386 GNU/Linux[rootlinux2 ~]# insmod /lib/modules/2.6.18-164.el5/kernel/net/ipv4/ip_gre.koC.GRE tunnel接口配置Linux1:ip tunnel add tunnel0 mode gre remote 192.168.20.2 local 192.168.10.1 ttl 255ip link set tunnel0 up mtu 1400ip addr add 172.16.1.1/30 dev tunnel0ip addr add 172.16.1.1/30 peer 172.16.1.2/30 dev tunnel0ip route add 202.100.2.2/32 dev tunnel0Linux2:ip tunnel add tunnel0 mode gre remote 192.168.10.1 local 192.168.20.2 ttl 255ip link set tunnel0 up mtu 1400ip addr add 172.16.1.2/30 dev tunnel0ip addr add 172.16.1.2/30 peer 172.16.1.1/30 dev tunnel0D.将tunnel配置开机运行linux1:vi /etc/init.d/gre.sh ##内容如下insmod /lib/modules/2.6.9-78.EL/kernel/net/ipv4/ip_gre.koip tunnel add tunnel0 mode gre remote 192.168.20.2 local 192.168.10.1 ttl 255ip link set tunnel0 up mtu 1400ip addr add 172.16.1.1/30 dev tunnel0ip addr del 172.16.1.1/30 peer 172.16.1.2/30 dev tunnel0ip addr add 172.16.1.1/30 peer 172.16.1.2/30 dev tunnel0ip route add 202.100.2.2/32 dev tunnel0chmod x /etc/init.d/gre.shecho /etc/init.d/gre.sh /etc/rc.d/rc.locallinux2:vi /etc/init.d/gre.sh ##内容如下insmod /lib/modules/2.6.18-164.el5/kernel/net/ipv4/ip_gre.koip tunnel add tunnel0 mode gre remote 192.168.10.1 local 192.168.20.2 ttl 255ip link set tunnel0 up mtu 1400ip addr add 172.16.1.2/30 dev tunnel0ip addr del 172.16.1.2/30 peer 172.16.1.1/30 dev tunnel0ip addr add 172.16.1.2/30 peer 172.16.1.1/30 dev tunnel0chmod x /etc/init.d/gre.shecho /etc/init.d/gre.sh /etc/rc.d/rc.localD.验证GRE接口[rootLinux1 ~]#ip addr show1: lo: mtu 16436 qdisc noqueuelink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 brd 127.255.255.255 scope host loinet6 ::1/128 scope hostvalid_lft forever preferred_lft forever2: eth0: mtu 1500 qdisc pfifo_fast qlen 1000link/ether 00:0c:29:e4:65:78 brd ff:ff:ff:ff:ff:ffinet 192.168.10.1/24 brd 192.168.10.255 scope global eth0inet6 fe80::20c:29ff:fee4:6578/64 scope linkvalid_lft forever preferred_lft forever3: sit0: mtu 1480 qdisc nooplink/sit 0.0.0.0 brd 0.0.0.04: gre0: mtu 1476 qdisc nooplink/gre 0.0.0.0 brd 0.0.0.05: tunnel0NONE: mtu 1400 qdisc noqueuelink/gre 192.168.10.1 peer 192.168.20.2inet 172.16.1.1 peer 172.16.1.2/30 scope global tunnel0[rootLinux2 ~]#ip addr show1: lo: mtu 16436 qdisc noqueuelink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host loinet6 ::1/128 scope hostvalid_lft forever preferred_lft forever2: eth0: mtu 1500 qdisc pfifo_fast qlen 1000link/ether 00:0c:29:08:48:63 brd ff:ff:ff:ff:ff:ffinet 192.168.20.2/24 brd 192.168.20.255 scope global eth0inet 202.100.2.2/30 brd 202.100.2.3 scope global eth0:0inet6 fe80::20c:29ff:fe08:4863/64 scope linkvalid_lft forever preferred_lft forever3: sit0: mtu 1480 qdisc nooplink/sit 0.0.0.0 brd 0.0.0.04: gre0: mtu 1476 qdisc nooplink/gre 0.0.0.0 brd 0.0.0.05: tunnel0NONE: mtu 1400 qdisc noqueuelink/gre 192.168.20.2 peer 192.168.10.1inet 172.16.1.2 peer 172.16.1.1/30 scope global tunnel05.效果测试[rootlinux1 ~]# ping 202.100.2.2PING 202.100.2.2 (202.100.2.2) 56(84) bytes of data.64 bytes from 202.100.2.2: icmp_seq0 ttl64 time82.4 ms64 bytes from 202.100.2.2: icmp_seq1 ttl64 time48.7 ms--- 202.100.2.2 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1002msrtt min/avg/max/mdev 48.784/65.633/82.482/16.849 ms, pipe 2
