Íóæíî ïîëó÷èòü 2 ip àäðåñà è 2 vlan íà ðîóòåðå Asus

**Lucyk** · 12-07-2009, 17:00

Originally Posted by md5sum

iptables -I FORWARD -o vlan1 -d 192.168.0.0/20 -j ACCEPT
iptables -t nat -I POSTROUTING -o vlan1 -d 192.168.0.0/20 -j SNAT --to-source=192.168.2.56

íè÷åãî íå ïîìåíÿëîñü...

**md5sum** · 12-07-2009, 17:33

ifconfig -a
iptables -L -n -v
iptables -L -n -v -t nat
ping 192.168.0.0 (ïèíãîâàòüñÿ íå äîëæíî)
arp -a

Âåðñèÿ ïðîøèâêè ?

**Lucyk** · 12-07-2009, 18:55

Originally Posted by md5sum

ifconfig -a
iptables -L -n -v
iptables -L -n -v -t nat
ping 192.168.0.0 (ïèíãîâàòüñÿ íå äîëæíî)
arp -a

Âåðñèÿ ïðîøèâêè ?

Ïðîøèâêà: 1.9.2.7-10
Ëîêàëüíûé IP íå 192.168.2.52, à 192.168.2.5

Code:

[admin@Emily root]$ ifconfig -a
br0       Link encap:Ethernet  HWaddr xxxxxxxxx  
          inet addr:192.168.9.148  Bcast:192.168.15.255  Mask:255.255.240.0
          inet6 addr: fe80::21f:c6ff:fe60:cee2/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2483 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1963 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:242128 (236.4 KiB)  TX bytes:1248451 (1.1 MiB)

eth0      Link encap:Ethernet  HWaddr xxxxxxxxxxxx 
          inet6 addr: fe80::21f:c6ff:fe60:cee2/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:30046 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2956 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:3933317 (3.7 MiB)  TX bytes:421628 (411.7 KiB)
          Interrupt:4 Base address:0x1000 

eth1      Link encap:Ethernet  HWaddr xxxxxxxxxxxxxx  
          inet6 addr: fe80::21f:c6ff:fe60:cee2/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2483 errors:0 dropped:0 overruns:0 frame:139
          TX packets:2180 errors:1 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:276912 (270.4 KiB)  TX bytes:1286626 (1.2 MiB)
          Interrupt:12 Base address:0x2000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING MULTICAST  MTU:16436  Metric:1
          RX packets:333 errors:0 dropped:0 overruns:0 frame:0
          TX packets:333 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:28594 (27.9 KiB)  TX bytes:28594 (27.9 KiB)

sit0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

vlan0     Link encap:Ethernet  HWaddr xxxxxxxxxxxxxx  
          inet6 addr: fe80::21f:c6ff:fe60:cee2/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:771 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:165942 (162.0 KiB)

vlan1     Link encap:Ethernet  HWaddr xxxxxxxxxxxx  
          inet addr:MY_REAL_IP  Bcast:XXX.XXX.62.127  Mask:255.255.255.128
          inet6 addr: fe80::20d:87ff:fe0f:11a/10 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:30029 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2183 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:3391543 (3.2 MiB)  TX bytes:255538 (249.5 KiB)

vlan1:0   Link encap:Ethernet  HWaddr xxxxxxxxxxxxxx 
          inet addr:192.168.2.5  Bcast:192.168.2.255  Mask:255.255.240.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1

Code:

[admin@Emily root]$ iptables -L -n -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    2   285 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          state INVALID 
  448 42078 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          state RELATED,ESTABLISHED 
   26  1560 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          state NEW 
  237 67529 ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0          state NEW 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:21 
  266 37365 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain FORWARD (policy ACCEPT 771 packets, 53387 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.9.155      udp dpt:16402 
    0     0 ACCEPT     all  --  *      vlan1   0.0.0.0/0            192.168.0.0/20     
    0     0 ACCEPT     all  --  br0    br0     0.0.0.0/0            0.0.0.0/0          
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          state INVALID 
 2948 1289K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          state RELATED,ESTABLISHED 
    0     0 DROP       all  --  !br0   vlan1   0.0.0.0/0            0.0.0.0/0          
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          ctstate DNAT 
    0     0 DROP       all  --  *      br0     0.0.0.0/0            0.0.0.0/0          

Chain OUTPUT (policy ACCEPT 730 packets, 120K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain MACS (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain SECURITY (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp flags:0x16/0x02 limit: avg 1/sec burst 5 
    0     0 RETURN     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp flags:0x17/0x04 limit: avg 1/sec burst 5 
    0     0 RETURN     udp  --  *      *       0.0.0.0/0            0.0.0.0/0          limit: avg 5/sec burst 5 
    0     0 RETURN     icmp --  *      *       0.0.0.0/0            0.0.0.0/0          limit: avg 5/sec burst 5 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain logaccept (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0          state NEW LOG flags 7 level 4 prefix `ACCEPT ' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0          state NEW LOG flags 7 level 4 prefix `DROP ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          
[admin@Emily root]$ iptables -L -n -v -t nat
Chain PREROUTING (policy ACCEPT 8093 packets, 841K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  205 21814 VSERVER    all  --  *      *       0.0.0.0/0            MY_REAL_IP        

Chain POSTROUTING (policy ACCEPT 28 packets, 1652 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 SNAT       all  --  *      vlan1   0.0.0.0/0            192.168.0.0/20     to:192.168.2.5 
  322 28942 SNAT       all  --  *      vlan1  !MY_REAL_IP          0.0.0.0/0          to:MY_REAL_IP 
   28  1653 SNAT       all  --  *      br0     192.168.0.0/20       192.168.0.0/20     to:192.168.9.148 

Chain OUTPUT (policy ACCEPT 56 packets, 3305 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain VSERVER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:53194 to:192.168.1.155:16402 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:12411 to:192.168.1.195:12411 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:12411 to:192.168.1.195:12411 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:53195 to:192.168.9.155:16402 
[admin@Emily root]$ ping 192.168.0.0
PING 192.168.0.0 (192.168.0.0): 56 data bytes

--- 192.168.0.0 ping statistics ---
10 packets transmitted, 0 packets received, 100% packet loss
[admin@Emily root]$ arp -a
-sh: arp: not found

**klim** · 13-07-2009, 05:46

Originally Posted by Lucyk

Ïðîøèâêà: 1.9.2.7-10
Ëîêàëüíûé IP íå 192.168.2.52, à 192.168.2.5

br0 Link encap:Ethernet HWaddr xxxxxxxxx
inet addr:192.168.9.148 Bcast:192.168.15.255 Mask:255.255.240.0
[cut/]

vlan1:0 Link encap:Ethernet HWaddr xxxxxxxxxxxxxx
inet addr:192.168.2.5 Bcast:192.168.2.255 Mask:255.255.240.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

Ó âàñ àäðåñ âíóòðåííåé ñåòè çà ðîóòåðîì ëåæèò â òîé æå ïîäñåòè, ÷òî è ïðîâàéäåðñêèé âíóòðåííèé.
Ìåíÿéòå ïîäñåòü LAN (br0) íàïðèìåð íà 172.16.1.0/24

**burning shadow** · 03-02-2010, 03:13

Ñèòóàöèÿ òàêàÿ. Ïðîâàéäåð âûäàåò ñåðûé IP äëÿ âõîäà â ñåòü, è ñâåðõó ïðîáðàñûâàåò íà íåãî ñ ïîìîùüþ NAT áåëûé IP. Ñîîòâåòñòâåííî, ðîóòåð íè÷åãî íå çíàåò î òîì, ÷òî áåëûé IP - ýòî òîæå îí. Ìíå íóæíî êàê-òî ïðîïèñàòü ýòîò áåëûé IP âòîðûì IP àäðåñîì íà WAN èíòåðôåéñå. Êàê ýòî ïðàâèëüíî ñäåëàòü?

Èç èíòåðíåòà ñåé÷àñ ðàáîòàåò òàê:

Code:

Internet -> [public_ip] -> ISP -> [private_ip] -> Router -(portmap)-> Local Server

Èç LAN òàê:

Code:

Local PC -> [public_ip] -> Router -> ISP -X

Íóæíî, ÷òîáû áûëî òàê:

Code:

Local PC -> [public_ip] -> Router -(portmap)-> Local Server

**vectorm** · 03-02-2010, 10:28

Ïî ìîåìó, Âû íå ñ òîé ñòîðîíû ê âîïðîñó ïîäîøëè (íà ñêîëüêî ÿ ïîíÿë âîïðîñ):
1. Ïðè ïîäêëþ÷åíèè êîìïüþòåðà íàïðÿìóþ, ó íåãî òîæå 2 IP â ñâîéñòâàõ ñåòè áóäóò???
2. Ïðè ïîäîáíîé íàñòðîéêå, íå ñîãëàñîâàííîé ñ ïðîâàéäåðîì, â ñåòè ïðîâàéäåðà îêàæóòñÿ 2 îäèíàêîâûõ IP àäðåñà (1 ó ïðîâàéäåðà íà îáîðóäîâàíèè ñíàðóæè, 2 ó Âàñ íà ðîóòåðå âíóòðè), è Âàñ çàáëîêèðóþò íàôèã.

**burning shadow** · 03-02-2010, 19:26

1. Äà. ß áû ïðîïèñàë âíåøíèé IP âòîðûì àäðåñîì ñ ìàñêîé 255.255.255.255 è âñå áû ðàáîòàëî.
2. Íå îêàæóòñÿ. Ìîé âíåøíèé àäðåñ íàõîäèòñÿ ñîâåðøåííî â äðóãîé ñåòè, ïàêåòû íà âíóòðåííèé àäðåñ ïðîáðàñûâàþòñÿ ñ ïîìîùüþ NAT.

**AlexeyS** · 03-02-2010, 19:37

Originally Posted by burning shadow

1. Äà. ß áû ïðîïèñàë âíåøíèé IP âòîðûì àäðåñîì ñ ìàñêîé 255.255.255.255 è âñå áû ðàáîòàëî.
2. Íå îêàæóòñÿ. Ìîé âíåøíèé àäðåñ íàõîäèòñÿ ñîâåðøåííî â äðóãîé ñåòè, ïàêåòû íà âíóòðåííèé àäðåñ ïðîáðàñûâàþòñÿ ñ ïîìîùüþ NAT.

Íåëüçÿ òàê äåëàòü! Îáîðóäîâàíèå ïðîâàéäåðà òîæå íå çíàåò ïðî âíåøíèé ip, ïðî íåãî çíàåò òîëüêî øëþç! Áîëåå òîãî, ìîé ïðîâàéäåð ñïåöèàëüíî áëîêèðóåò îáðàùåíèå ê âíåøíåìó ip èçíóòðè ñåòè, ÷òîáû òðàôèê ø¸ë íàïðÿìóþ, à íå ÷åðåç øëþç.

**Basile** · 03-02-2010, 19:42

ß äóìàþ, ÷òî íóæíî ïîñòóïàòü òàê, êàê äåëàþò ñ ¨òîé:

Originally Posted by CiJay

Âîçâðàùàÿñü ê ïðîáðîñêå ïîðòîâ:
Â äîìàøíåé ñåòêå éîòà ðîóòåð ñ LAN IP àäðåñîì 192.168.1.1, è íåêèé ñåòåâîé ýëåìåíò c àäðåñîì 192.168.1.10, ê êîòîðîìó íóæåí äîñòóï èçâíå ïî ïîðòàìè 80 è 23,øëþç ïî óìîë÷àíèþ 192.168.1.1. Èòàê êîìàíäû

Code:

iptables -t nat -A PREROUTING -p tcp -d myhost.dyndns.org --dport 2080 -j DNAT --to-destination 192.168.1.10:80
iptables -t nat -A PREROUTING -p tcp -d myhost.dyndns.org --dport 2023 -j DNAT --to-destination 192.168.1.10:23

Ñ ýòèìè êîìàíäàìè äîñòóï èçâíå ðàáîòàåò.

À â íàñòðîéêàõ dyndns â ðîóòåðå íóæíî âêëþ÷èòü ýòîò ôëàã:

Originally Posted by lly

Originally Posted by sidor_ii

Ïîïðîáóþ ñïðîñèòü åùå ðàç...
×òî çíà÷èò â ïðîøèâêå ñòðî÷êà: Autodetect public IP address?
Êàêîå åå íàçíà÷åíèå ?

Âñòðîåííàÿ http://wl500g.info/showthread.php?p=169947#post169947
äëÿ ïîëüçîâàòåëåé ñòðàííûõ ïðîâàéäåðîâ êîòîðûå íå äàþò áåëûé IP, íî ïðîáðàñûâàþò âñå ïîðòû àâòîìàòîì.

**burning shadow** · 03-02-2010, 20:06

Originally Posted by AlexeyS

Íåëüçÿ òàê äåëàòü! Îáîðóäîâàíèå ïðîâàéäåðà òîæå íå çíàåò ïðî âíåøíèé ip, ïðî íåãî çíàåò òîëüêî øëþç! Áîëåå òîãî, ìîé ïðîâàéäåð ñïåöèàëüíî áëîêèðóåò îáðàùåíèå ê âíåøíåìó ip èçíóòðè ñåòè, ÷òîáû òðàôèê ø¸ë íàïðÿìóþ, à íå ÷åðåç øëþç.

Ìîæíî òàê äåëàòü. Îáîðóäîâàíèþ ïðîâàéäåðà è íå íóæíî íè÷åãî çíàòü. Ìíå ýòî íóæíî ëèøü äëÿ òîãî, ÷òîáû èç ìîåé ëîêàëêè (çà ðîóòåðîì) ïàêåòû, îòïðàâëåííûå íà ìîé âíåøíèé IP, íèêóäà çà ïðåäåëû ðîóòåðà íå âûõîäèëè. Ò.å. WAN èíòåðôåéñ ðîóòåðà äîëæåí ñ÷èòàòü èõ ñâîèìè è ïîñòóïàòü ñ íèìè òàê, êàê åñëè áû îíè ïðèøëè íà åãî îñíîâíîé IP (ñåðûé). Âîò è âñå.

**AlexeyS** · 03-02-2010, 20:26

Originally Posted by burning shadow

Ìîæíî òàê äåëàòü. Îáîðóäîâàíèþ ïðîâàéäåðà è íå íóæíî íè÷åãî çíàòü. Ìíå ýòî íóæíî ëèøü äëÿ òîãî, ÷òîáû èç ìîåé ëîêàëêè (çà ðîóòåðîì) ïàêåòû, îòïðàâëåííûå íà ìîé âíåøíèé IP, íèêóäà çà ïðåäåëû ðîóòåðà íå âûõîäèëè. Ò.å. WAN èíòåðôåéñ ðîóòåðà äîëæåí ñ÷èòàòü èõ ñâîèìè è ïîñòóïàòü ñ íèìè òàê, êàê åñëè áû îíè ïðèøëè íà åãî îñíîâíîé IP (ñåðûé). Âîò è âñå.

Ïðîùå âñåì îáúÿñíèòü ïðî âíóòðåííèé ip, èëè ïðèñâîèòü ðîóòåðó äîìåííîå èìÿ, ñîâïàäàþùåå ñ DNS èìåíåì âíåøíåãî ip, è îáðàùàòüñÿ ïî èìåíè.

**Power** · 03-02-2010, 20:49

Originally Posted by burning shadow

Ìîæíî òàê äåëàòü. Îáîðóäîâàíèþ ïðîâàéäåðà è íå íóæíî íè÷åãî çíàòü. Ìíå ýòî íóæíî ëèøü äëÿ òîãî, ÷òîáû èç ìîåé ëîêàëêè (çà ðîóòåðîì) ïàêåòû, îòïðàâëåííûå íà ìîé âíåøíèé IP, íèêóäà çà ïðåäåëû ðîóòåðà íå âûõîäèëè. Ò.å. WAN èíòåðôåéñ ðîóòåðà äîëæåí ñ÷èòàòü èõ ñâîèìè è ïîñòóïàòü ñ íèìè òàê, êàê åñëè áû îíè ïðèøëè íà åãî îñíîâíîé IP (ñåðûé). Âîò è âñå.

Ïðîïèøèòå â òàêîì ñëó÷àå â iptables:

Code:

iptables -t nat -A PREROUTING -i br0 -d âíåøíèé_àéïè -j VSERVER
iptables -t nat -A PREROUTING -i br0 -d âíåøíèé_àéïè -j DNAT --to-destination ñåðûé_àéïè_ðîóòåðà

Ïåðâîå ïðàâèëî îòïðàâèò ïàêåò íà port forward (virtual server), à âòîðîå - çàâåðí¸ò íà ðîóòåð, åñëè íå ñðàáîòàëî ïåðâîå (ò.å. åñëè òàêîé ïîðò íå ïðîáðîøåí íèêóäà).

**Basile** · 03-02-2010, 22:05

Ýýýý... Power, ÿ óæå äàë ïî÷òè ÷òî òàêîé æå ñîâåò!

**Power** · 03-02-2010, 23:40

Originally Posted by Basile

Ýýýý... Power, ÿ óæå äàë ïî÷òè ÷òî òàêîé æå ñîâåò!

Íó, âñ¸-òàêè ïî÷òè, íî íå òàêîé æå.
ß èñõîäèë èç òîãî, ÷òî:
1) ðàáîòàòü äîëæíî òîëüêî äëÿ òåõ ïàêåòîâ, êîòîðûå èäóò èç ëîêàëüíîé ñåòè ðîóòåðà (íå ïðîâàéäåðà);
2) Ðàáîòàòü äîëæíî äëÿ âñåõ ïðîáðîøåííûõ ïîðòîâ è "÷òîáû èç ìîåé ëîêàëêè (çà ðîóòåðîì) ïàêåòû, îòïðàâëåííûå íà ìîé âíåøíèé IP, íèêóäà çà ïðåäåëû ðîóòåðà íå âûõîäèëè".

**burning shadow** · 04-02-2010, 08:13

Originally Posted by Power

iptables -t nat -A PREROUTING -i br0 -d âíåøíèé_àéïè -j VSERVER
iptables -t nat -A PREROUTING -i br0 -d âíåøíèé_àéïè -j DNAT --to-destination ñåðûé_àéïè_ðîóòåðà

Ñïàñèáî, ýòî òî, ÷òî áûëî íóæíî.

Âîïðîñ, êóäà ýòî ïðîïèñàòü, ÷òîáû ïîñëå ðåáóòà ðîóòåðà ïðàâèëà íå ïðîïàäàëè?

Thread: Íóæíî ïîëó÷èòü 2 ip àäðåñà è 2 vlan íà ðîóòåðå Asus

Thread Tools

Rate This Thread

Display

Êàê ïîäíÿòü âòîðîé IP íà WAN èíòåðôåéñå?

Similar Threads

Èíòåðôåéñû è MAC-àäðåñà ðîóòåðà Asus WL-500gP/500W/RT-N16

Ïðîáëåìû ñ tagged vlan (802.1q)

Îòïðàâêà IP àäðåñà WAN èíòåðôåéñà ïî SMS è eMail

Âíóòðåííèé è âíåøíèé IP àäðåñà + DCHub

Îøèáêà ïðè ñìåíå ìàê àäðåñà íà ðîóòåðå

Tags for this Thread

Posting Permissions