环境信息

服务器: OVH Dedicated
IPv4: /32
IPv6: /128

更新系统

apt update && apt upgrade

添加网卡

root@ns3003101:~# nano /etc/network/interfaces
auto lo
iface lo inet loopback

iface eno1 inet manual

auto vmbr0
iface vmbr0 inet static
        address 123.123.45.67/32
        gateway 123.123.45.254
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0
        hwaddress 00:C4:CC:7A:**:**

iface vmbr0 inet6 static
        address 2001:41d0:**:**::1/128
        gateway 2001:41d0:**:**:ff:ff:ff:ff

# 添加网卡vmbr1
auto vmbr1
iface vmbr1 inet static
address 10.0.0.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up echo 1 > /proc/sys/net/ipv4/conf/vmbr1/proxy_arp
post-up   iptables -t nat -A POSTROUTING -s '10.0.0.254/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.0.0.254/24' -o vmbr0 -j MASQUERADE

重启网络服务使其生效

systemctl restart networking

DHCP

经过我实际使用,小鸡少的话,可以直接手动配置静态ip,不需要DHCP。当然,如果你觉得麻烦的话可以使用DHCP自动分配。

安装dhcp服务

安装后不要启动,待配置完成方能启动。

root@ns3003101:~# apt-get install isc-dhcp-server

配置dhcp服务

配置提供DHCP服务的网卡

root@ns3003101:~# nano /etc/default/isc-dhcp-server
INTERFACESv4="vmbr1"
INTERFACESv6=""

编辑DHCP服务器配置文件

root@ns3003101:~#  nano /etc/dhcp/dhcpd.conf
option domain-name "ks2.topwuan.tech";
option domain-name-servers 8.8.8.8, 8.8.4.4;

default-lease-time 600;
max-lease-time 7200;
subnet 192.168.100.0 netmask 255.255.255.0 {
    range 192.168.100.5 192.168.100.230;
    option subnet-mask 255.255.255.0;
    option domain-name-servers 8.8.8.8, 8.8.4.4;
    option domain-name "ks2.topwuan.tech";
    option routers 192.168.100.1;
    option netbios-name-servers 192.168.100.1;
    option netbios-node-type 8;
    get-lease-hostnames true;
    use-host-decl-names true;
    default-lease-time 600;
    max-lease-time 7200;
    interface vmbr1;
}

启动dhcp服务并检查服务是否正常

root@ns3003101:~#  systemctl restart isc-dhcp-server
root@ns3003101:~#  systemctl status isc-dhcp-server

测试IP地址获取

创建一台小鸡,网卡选择vmbr1,进入系统后检查IP,看是否是DHCP分配的10.0.0.0/24段的IP。成功获取到想对应ip的话,就可以正常的NAT上网了。

标签: proxmox, pve, nat

添加新评论