Linux路由不工作
Linux路由不工作
提问于 2016-06-21 13:23:54
我得到了华硕rt-n18u路由器，我想从本地网络建立vpn接入。
因此，我已经在路由器上被称为optware和vpnc，并在tun0接口上成功地创建了vpn连接(下面的ifconfig)。问题是我不能通过本地网络来平/连接VPN，但是我可以从路由器本身。
问题-如何将br0转发到tun0?
ip_forward设置为1。
下表和路由表。
ifconfig输出：
br0 Link encap:Ethernet HWaddr F0:79:59:D3:7D:20
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:32993 errors:0 dropped:0 overruns:0 frame:0
TX packets:40247 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4436741 (4.2 MiB) TX bytes:31815424 (30.3 MiB)
eth0 Link encap:Ethernet HWaddr F0:79:59:D3:7D:20
inet addr:212.XX.XX.XX Bcast:212.XX.XX.XX Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:412673 errors:0 dropped:0 overruns:0 frame:0
TX packets:431752 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:105828668 (100.9 MiB) TX bytes:121288162 (115.6 MiB)
Interrupt:179 Base address:0x4000
eth1 Link encap:Ethernet HWaddr F0:79:59:D3:7D:20
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:12545 errors:0 dropped:0 overruns:0 frame:212071
TX packets:22614 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1704797 (1.6 MiB) TX bytes:14120516 (13.4 MiB)
Interrupt:163
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MULTICAST MTU:16436 Metric:1
RX packets:4023 errors:0 dropped:0 overruns:0 frame:0
TX packets:4023 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:858801 (838.6 KiB) TX bytes:858801 (838.6 KiB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-0
0-00
inet addr:198.XX.XX.XX P-t-P:198.XX.XX.XX Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1412 Metric:1
RX packets:284 errors:0 dropped:0 overruns:0 frame:0
TX packets:1172 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:26331 (25.7 KiB) TX bytes:95242 (93.0 KiB)
vlan1 Link encap:Ethernet HWaddr F0:79:59:D3:7D:20
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:230007 errors:0 dropped:0 overruns:0 frame:0
TX packets:205941 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:24156339 (23.0 MiB) TX bytes:98109904 (93.5 MiB)tun0 - vpn
eth0 - WAN
br0 -本地接口
这是路由表
Destination Gateway Genmask Flags Metric Ref Use Iface
193.XX.XX.XX 1.45.XX.XX 255.255.255.255 UGH 0 0 0 eth0
147.XXX.XXX.XXX * 255.255.255.255 UH 0 0 0 tun0
212.90.XX.XX * 255.255.255.255 UH 0 0 0 eth0
172.24.6.254 * 255.255.255.255 UH 0 0 0 tun0
147.XXX.XXX.XXX * 255.255.255.255 UH 0 0 0 tun0
147.XXX.XXX.XXX * 255.255.255.255 UH 0 0 0 tun0
198.18.1.0 * 255.255.255.0 U 0 0 0 tun0
XXX.XXX.XXX.XXX * 255.255.255.0 U 0 0 0 tun0
192.168.1.0 * 255.255.255.0 U 0 0 0 br0
147.XXX.XXX.XXX * 255.255.255.0 U 0 0 0 tun0
147.XXX.XXX.XXX * 255.255.255.0 U 0 0 0 tun0
212.XXX.XXX.XXX * 255.240.0.0 U 0 0 0 tun0
10.0.0.0 * 255.0.0.0 U 0 0 0 tun0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 1.45.XX.XX 0.0.0.0 UG 0 0 0 eth0和iptables -L
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N FUPNP
-N PControls
-N SECURITY
-N logaccept
-N logdrop
-A INPUT -p udp -m udp --dport 4672 -j ACCEPT
-A INPUT -p udp -m udp --dport 4665 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 4662 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 51413 -j ACCEPT
-A INPUT -p udp -m udp --dport 51413 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD ! -i br0 -o eth0 -j DROP
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A OUTPUT -p udp -m udp --dport 4672 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 4665 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 4662 -j ACCEPT
-A FUPNP -d 192.168.1.202/32 -p udp -m udp --dport 59077 -j ACCEPT
-A FUPNP -d 192.168.1.202/32 -p tcp -m tcp --dport 59077 -j ACCEPT
-A FUPNP -d 192.168.1.169/32 -p udp -m udp --dport 59077 -j ACCEPT
-A FUPNP -d 192.168.1.169/32 -p tcp -m tcp --dport 59077 -j ACCEPT
-A PControls -j ACCEPT
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec
-j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec
-j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -j DROP
-A SECURITY -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j RETURN
-A SECURITY -p icmp -m icmp --icmp-type 8 -j DROP
-A SECURITY -j RETURN
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequen
ce --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence -
-log-tcp-options --log-ip-options
-A logdrop -j DROP我刚接触过网络，所以我很感谢你的帮助！
回答 1
Server Fault用户
回答已采纳
发布于 2016-06-22 02:53:53
iptables -I FORWARD -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -j ACCEPT
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE 页面原文内容由Server Fault提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://serverfault.com/questions/785406
复制
![[Linux] linux路由表](https://ask.qcloudimg.com/http-save/yehe-2504969/k2t0ak2hkv.png)
相似问题
Linux路由不持久化
Linux :不工作
窗口静态路由不工作
haproxy sni路由不工作
Debian静态路由不工作？
添加站长 进交流群
领取专属 10元无门槛券
AI混元助手 在线答疑
关注 腾讯云开发者公众号
洞察 腾讯核心技术
剖析业界实践案例
社区富文本编辑器全新改版！诚邀体验～
全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验
腾讯云开发者
