{"id":1308,"date":"2018-07-16T16:33:35","date_gmt":"2018-07-16T08:33:35","guid":{"rendered":"https:\/\/www.xiaobo.li\/?p=1308"},"modified":"2018-07-16T16:47:45","modified_gmt":"2018-07-16T08:47:45","slug":"linux-bridge-vlan-%e6%9e%b6%e6%9e%84%e6%96%b9%e6%a1%88%e5%ae%9e%e4%be%8b","status":"publish","type":"post","link":"https:\/\/www.xiaobo.li\/notes\/archives\/1308","title":{"rendered":"linux bridge vlan \u67b6\u6784\u65b9\u6848\u5b9e\u4f8b"},"content":{"rendered":"<table cellspacing=\"0\" cellpadding=\"0\">\n<tbody>\n<tr>\n<td id=\"postmessage_480867\" class=\"t_f\">\u4e00\u3001\u7ec4\u7f51\u7ed3\u6784\u56fe\u5982\u4e0b\uff1a<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1310 \" src=\"https:\/\/www.xiaobo.li\/notes\/wp-content\/uploads\/2018\/07\/11-2.png\" alt=\"\" width=\"636\" height=\"333\" srcset=\"https:\/\/www.xiaobo.li\/notes\/wp-content\/uploads\/2018\/07\/11-2.png 737w, https:\/\/www.xiaobo.li\/notes\/wp-content\/uploads\/2018\/07\/11-2-300x157.png 300w\" sizes=\"auto, (max-width: 636px) 100vw, 636px\" \/><br \/>\n<strong>1\u3001SW\u4ea4\u6362\u673a\u548cHUB<\/strong><\/p>\n<div align=\"left\">1)\u3001\u4ea4\u6362\u673a\u8fde\u63a5HUB\u7684\u7aef\u53e3\u4e3atrunk\u6a21\u5f0f\uff0ctrunk vlan100\uff0c\u4ea4\u6362\u673a\u4e0a\u7684\u5916\u7f51\u7f51\u6bb5\u4e3a10.10.100.0\/24\uff0cvlan\u4e3a100 \uff0c\u5206\u914diptables\u670d\u52a1\u5668\u7684IP\u662f10.10.100.100\uff0c\u7f51\u5173\u662f10.10.100.254\uff1b<\/div>\n<div align=\"left\">2\uff09\u3001HUB\u662f\u4e00\u4e2a\u7eafhub\uff0c\u4e0d\u80fd\u505a\u4efb\u4f55\u7684\u914d\u7f6e\u3002<\/div>\n<p><strong>2\u3001\u670d\u52a1\u5668A<\/strong><\/p>\n<ul>\n<li>A\u4e3b\u673a\u7684eth0\u4e0a\u8054\u5230HUB\uff0c\u628aeth0\u5212\u5206\u6210\u4e24\u4e2a\u903b\u8f91\u5b50\u7aef\u53e3eth0.10\u3001eth0.20\uff0ceth0.10\u6253\u4e0avlan10\u6807\u7b7e\uff0ceth0.20\u6253\u4e0avlan20\u6807\u7b7e\uff1b<\/li>\n<li>A\u4e3b\u673a\u91cc\u9762\u8fd0\u884c\u4e24\u4e2a\u865a\u62df\u673aVM1\u548cVM2\uff1b<\/li>\n<li>\u4e24\u53f0\u865a\u62df\u673a\u5728\u4e0d\u540c\u7684\u7f51\u6bb5\uff0c10.10.10.0\/24\u00a0\u00a0vlan10\u7f51\u5173\u662f10.10.10.254\u300110.10.20.0\/24vlan20\u00a0\u00a0\u7f51\u5173\u662f10.10.20.254\uff1b<\/li>\n<li>\u5728\u4e3b\u673aA\u4e2d\u5efa\u7acb\u4e24\u4e2abridge: br10\u3001br20 ,br10\u5173\u8054\u7aef\u53e3eth0.10 \uff0cbr20\u5173\u8054\u7aef\u53e3eth0.20,br10\u7684IP\u662f10.10.10.1\uff0cbr20\u7684IP\u662f10.10.20.1<\/li>\n<li>VM1\u6865\u63a5\u5230br10ip:10.10.10.11,VM2\u6865\u63a5\u5230br20 ip:10.10.20.11\uff1b<\/li>\n<\/ul>\n<p><strong>3\u3001\u670d\u52a1\u5668B<\/strong>1\uff09\u3001B\u4e3b\u673a\u7684eth0\u4e0a\u8054\u5230HUB\uff0c\u628aeth0\u5212\u5206\u6210\u4e24\u4e2a\u903b\u8f91\u5b50\u7aef\u53e3eth0.10\u3001eth0.20\uff0ceth0.10\u6253\u4e0avlan10\u6807\u7b7e\uff0ceth0.20\u6253\u4e0avlan20\u6807\u7b7e\uff1b<br \/>\n2\uff09\u3001B\u4e3b\u673a\u91cc\u9762\u8fd0\u884c\u4e24\u4e2a\u865a\u62df\u673aVM3\u548cVM4\uff1b<br \/>\n3\uff09\u3001\u4e24\u53f0\u865a\u62df\u673a\u5728\u4e0d\u540c\u7684\u7f51\u6bb5\uff0c10.10.10.0\/24\u00a0\u00a0vlan10 \u7f51\u5173\u662f10.10.10.254\u300110.10.20.0\/24 vlan20\u00a0\u00a0\u7f51\u5173\u662f10.10.20.254\uff1b<br \/>\n4\uff09\u3001\u5728\u4e3b\u673aB\u4e2d\u5efa\u7acb\u4e24\u4e2abridge: br10\u3001br20 ,br10\u5173\u8054\u7aef\u53e3eth0.10 \uff0cbr20\u5173\u8054\u7aef\u53e3eth0.20,br10\u7684IP\u662f10.10.10.2\uff0cbr20\u7684IP\u662f10.10.20.2<br \/>\n5\uff09\u3001VM3\u6865\u63a5\u5230br10 ip\u662f10.10.10.12\uff0cVM2\u6865\u63a5\u5230br20 ip\u662f10.10.20.12\uff1b<\/p>\n<p><strong>4\u3001IPtables\u670d\u52a1\u5668<\/strong><\/p>\n<div align=\"left\">1\uff09\u3001iptalbes\u670d\u52a1\u5668\u5728\u8fd9\u7684\u4f5c\u7528\u662f\uff1a\u8ba9A\u3001B\u670d\u52a1\u5668\u5185\u7684\u865a\u62df\u673a\u51fa\u7f51nat\u4f5c\u7528\u3001\u901a\u8fc7\u5916\u7f51\u8bbf\u95eeA\u3001B\u865a\u62df\u673a\u63d0\u4f9b\u7684web\u670d\u52a1\u5668\u3002<\/div>\n<div align=\"left\">2\uff09\u3001iptables\u670d\u52a1\u5668\u7684eth0\u53e3\uff0c\u8d70\u865a\u62df\u673avlan10\u3001vlan20\u7684\u4e1a\u52a1\u6d41\u91cf\uff0c\u6240\u4ee5\u9700\u8981\u901a\u8fc7eth0\u5212\u5206\u4e24\u4e2a\u903b\u8f91\u7aef\u53e3eth0.10\u3001eth0.20\uff0c\u5e76\u4e14\u521b\u5efa\u4e24\u4e2abridge\uff1abr10\u3001br20\uff0cbr10\u5173\u8054\u7aef\u53e3eth0.10\uff0cbr20\u5173\u8054\u7aef\u53e3eth0.20\uff0cbr10\u7684ip\u5730\u5740\u662f10.10.10.254\uff0cbr20\u7684ip\u5730\u5740\u662f10.10.20.254\u3002<\/div>\n<div align=\"left\">3\uff09\u3001iptables\u670d\u52a1\u5668\u7684eth1\u53e3\u4f5c\u4e3a\u5916\u7f51\u51fa\u53e3\u63a5\u5165hub\uff0c\u9700\u8981\u5728eth1\u7aef\u53e3\u4e0a\u914d\u7f6eIP10.10.100.100\uff0c\u7f51\u5173\u914d\u7f6e\u4e3a10.10.100.254\uff0c\u7528vconfig\u547d\u4ee4\u7ed9eth1\u6253\u4e0avlan\u6807\u7b7e100\u3002<\/div>\n<p><strong>5\u3001\u5b9e\u73b0\u9700\u6c42<\/strong>\u00a0 \u00a0 A\u3001B\u670d\u52a1\u5668\u7684\u865a\u62df\u673a\u53ef\u4ee5\u76f8\u4e92\u8bbf\u95ee\uff0c\u865a\u62df\u673a\u53ef\u4ee5\u8bbf\u95ee\u5916\u7f51\uff0cA\u670d\u52a1\u5668\u63d0\u4f9b\u7684web\u7ba1\u7406\u754c\u9762\u53ef\u4ee5\u901a\u8fc7\u5916\u7f51\u8bbf\u95ee\u3002<br \/>\n<strong>\u4e8c\u3001\u7f51\u7edc\u5c42\u9762\u8bbe\u5907\u914d\u7f6e<\/strong><strong>1\u3001\u4ea4\u6362\u673a\u914d\u7f6e<\/strong>\u00a0 \u00a0\u628a\u4ea4\u6362\u673a\u548chub\u76f8\u8fde\u7684\u7aef\u53e3\u914d\u7f6e\u4e3atrunk\u7aef\u53e3\uff0c\u5141\u8bb8vlan 100\u901a\u8fc7\u3002<br \/>\n<strong>2\u3001\u670d\u52a1\u5668A\u7684\u914d\u7f6e<\/strong>1\uff09\u3001\u5b89\u88c5vconfig\u5305\uff08redhat7.0\u4e00\u4e0b\u7248\u672c\u9ed8\u8ba4\u5e26vconfig\u5305\uff09<\/p>\n<div align=\"left\">yum install vconfig<\/div>\n<p>2\uff09\u3001\u5728\u5185\u6838\u52a0\u8f7d802.1q\u6a21\u5757<\/p>\n<div align=\"left\">modprobe 8021q<\/div>\n<div align=\"left\">lsmod |grep -i 8021q\u00a0\u00a0\uff08\u67e5\u770b\u6a21\u5757\u662f\u5426\u52a0\u8f7d\uff09<\/div>\n<p>3\uff09\u3001\u914d\u7f6e\u7269\u7406\u7f51\u5361<\/p>\n<div align=\"left\">sed\u00a0\u00a0\u2013i\u00a0\u00a0's\/ONBOOT=no\/ONBOOT=yes\/g'\u00a0\u00a0\/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/div>\n<p>sed \u2013i 's\/BOOTPROTO=dhcp\/BOOTPROTO=static\/g'\/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/p>\n<p>3\uff09\u3001\u7ed9\u7269\u7406\u63a5\u53e3\u6dfb\u52a0vlan\u5e76\u914d\u7f6evlan\u7684\u5c5e\u6027<\/p>\n<div align=\"left\">vconfig add eth0 10<\/div>\n<div align=\"left\">config set_flag eth0.10 1 1<\/div>\n<div align=\"left\">vconfig add eth0 20<\/div>\n<div align=\"left\">config set_flag eth0.20 1 1<\/div>\n<p>4\uff09\u3001\u6dfb\u52a0eth0.10\u3001eth0.20\u5b50\u63a5\u53e3\u5e76\u6dfb\u52a0\u914d\u7f6e\u6587\u4ef6<\/p>\n<div align=\"left\">touch \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'DEVICE=eth0.10' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'TYPE=ethernet' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'BRIDGE=br10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10 #\uff08\u628aeth0.10\u52a0\u5165br10\uff09<\/div>\n<div align=\"left\">touch \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'DEVICE=eth0.20' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'TYPE=ethernet' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'BRIDGE=br20'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20 #\uff08\u628aeth0.20\u52a0\u5165br20\uff09<\/div>\n<p>5\uff09\u3001\u914d\u7f6ebridge<\/p>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'DEVICE=br10'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'TYPE=bridge' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'DEVICE=br10'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'TYPE=bridge' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<p>6\uff09\u3001\u542f\u52a8\u5b50\u63a5\u53e3\u548cbridge\u63a5\u53e3<\/p>\n<div align=\"left\">ifup eth0.10<\/div>\n<div align=\"left\">ifup eth0.20<\/div>\n<div align=\"left\">ifup br10<\/div>\n<div align=\"left\">ifup br20<\/div>\n<p>7\uff09\u3001\u7ed9bridge\u63a5\u53e3\u914d\u7f6eIP<br \/>\necho 'IPADDR=10.10.10.1'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/p>\n<div align=\"left\">echo 'NETMASK=255.255.255.0'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<p>echo 'IPADDR=10.10.20.1'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/p>\n<div align=\"left\">echo 'NETMASK= 255.255.255.0'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<p>8\uff09\u3001\u6dfb\u52a0eth0.10 eth0.20\u5230br10\u3001br20<br \/>\nbrctl addif br10\u00a0\u00a0eth0.10<br \/>\nbrctl addif br20\u00a0\u00a0eth0.20<br \/>\n9\uff09\u3001\u91cd\u542f\u7f51\u7edc<\/p>\n<div align=\"left\">service network restart<\/div>\n<div align=\"left\">10\uff09\u3001\u8bbe\u7f6e\u4e0b\u6b21\u542f\u52a8\u81ea\u52a8\u52a0\u8f7d8021q \u6a21\u5757<br \/>\necho 'VLAN=yes' &gt;&gt; \/etc\/sysconfig\/network<\/div>\n<div align=\"left\">echo 'modprobe 8021q'&gt;&gt;\/etc\/rc.local<\/div>\n<p>11\uff09\u3001\u53ef\u4ee5\u4f7f\u7528cat \/proc\/net\/vlan\/eth0.10\u67e5\u770beth0.10\u53c2\u6570<br \/>\n<strong>3\u3001\u670d\u52a1\u5668B\u7684\u914d\u7f6e<\/strong>1\uff09\u3001\u5b89\u88c5vconfig\u5305\uff08redhat7.0\u4e00\u4e0b\u7248\u672c\u9ed8\u8ba4\u5e26vconfig\u5305\uff09<\/p>\n<div align=\"left\">yum install vconfig<\/div>\n<p>2\uff09\u3001\u5728\u5185\u6838\u52a0\u8f7d802.1q\u6a21\u5757<\/p>\n<div align=\"left\">modprobe 8021q<\/div>\n<div align=\"left\">lsmod |grep -i8021q\u00a0\u00a0\uff08\u67e5\u770b\u6a21\u5757\u662f\u5426\u52a0\u8f7d\uff09<\/div>\n<p>3\uff09\u3001\u914d\u7f6e\u7269\u7406\u7f51\u5361<\/p>\n<div align=\"left\">sed\u00a0\u00a0\u2013i\u00a0\u00a0's\/ONBOOT=no\/ONBOOT=yes\/g' \/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/div>\n<p>sed \u2013i 's\/BOOTPROTO=dhcp\/BOOTPROTO=static\/g'\/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/p>\n<p>3\uff09\u3001\u7ed9\u7269\u7406\u63a5\u53e3\u6dfb\u52a0vlan\u5e76\u914d\u7f6evlan\u7684\u5c5e\u6027<\/p>\n<div align=\"left\">vconfig add eth010<\/div>\n<div align=\"left\">config set_flageth0.10 1 1<\/div>\n<div align=\"left\">vconfig add eth0 20<\/div>\n<div align=\"left\">config set_flag eth0.20 1 1<\/div>\n<p>4\uff09\u3001\u6dfb\u52a0eth0.10\u3001eth0.20\u5b50\u63a5\u53e3\u5e76\u6dfb\u52a0\u914d\u7f6e\u6587\u4ef6<\/p>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'DEVICE=eth0.10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'TYPE=ethernet'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'BRIDGE=br10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10 #\uff08\u628aeth0.10\u52a0\u5165br10\uff09<\/div>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'DEVICE=eth0.20'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'TYPE=ethernet'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'BRIDGE=br20'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20 #\uff08\u628aeth0.20\u52a0\u5165br20\uff09<\/div>\n<p>5\uff09\u3001\u914d\u7f6ebridge<\/p>\n<div align=\"left\">touch \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'DEVICE=br10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">echo 'TYPE=bridge' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<div align=\"left\">touch \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'DEVICE=br10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<div align=\"left\">echo 'TYPE=bridge' &gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<p>6\uff09\u3001\u542f\u52a8\u5b50\u63a5\u53e3\u548cbridge\u63a5\u53e3<\/p>\n<div align=\"left\">ifup eth0.10<\/div>\n<div align=\"left\">ifup eth0.20<\/div>\n<div align=\"left\">ifup br10<\/div>\n<div align=\"left\">ifup br20<\/div>\n<p>7\uff09\u3001\u7ed9bridge\u63a5\u53e3\u914d\u7f6eIP<br \/>\necho'IPADDR=10.10.10.2'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/p>\n<div align=\"left\">echo 'NETMASK= 255.255.255.0' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br10<\/div>\n<p>echo'IPADDR=10.10.20.2'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/p>\n<div align=\"left\">echo 'NETMASK= 255.255.255.0' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-br20<\/div>\n<p>8\uff09\u3001\u6dfb\u52a0eth0.10 eth0.20\u5230br10\u3001br20<br \/>\nbrctladdif br10\u00a0\u00a0eth0.10<br \/>\nbrctladdif br20\u00a0\u00a0eth0.20<br \/>\n9\uff09\u3001\u91cd\u542f\u7f51\u7edc<\/p>\n<div align=\"left\">service network restart<\/div>\n<div align=\"left\">10\uff09\u3001\u8bbe\u7f6e\u4e0b\u6b21\u542f\u52a8\u81ea\u52a8\u52a0\u8f7d 8021q \u6a21\u5757<br \/>\necho 'VLAN=yes' &gt;&gt; \/etc\/sysconfig\/network<\/div>\n<div align=\"left\">echo 'modprobe 8021q' &gt;&gt;\/etc\/rc.local<\/div>\n<p>\u670d\u52a1\u5668A\u548c\u670d\u52a1\u5668B\u7684\u7f51\u7edc\u914d\u7f6e\u53ea\u6709bridge\u4e0a\u7684IP\u4e0d\u540c<br \/>\n<strong>4\u3001IPtables\u670d\u52a1\u5668\u7684\u914d\u7f6e<\/strong><strong>\uff081\uff09\u3001\u670d\u52a1\u5668eth0\u53e3\u7684\u914d\u7f6e<\/strong>1\uff09\u3001\u5b89\u88c5vconfig\u5305\uff08redhat7.0\u4e00\u4e0b\u7248\u672c\u9ed8\u8ba4\u5e26vconfig\u5305\uff09<\/p>\n<div align=\"left\">yum install vconfig<\/div>\n<p>2\uff09\u3001\u5728\u5185\u6838\u52a0\u8f7d802.1q\u6a21\u5757<\/p>\n<div align=\"left\">modprobe 8021q<\/div>\n<div align=\"left\">lsmod |grep -i8021q\u00a0\u00a0\uff08\u67e5\u770b\u6a21\u5757\u662f\u5426\u52a0\u8f7d\uff09<\/div>\n<p>3\uff09\u3001\u914d\u7f6e\u7269\u7406\u7f51\u5361<\/p>\n<div align=\"left\">sed\u00a0\u00a0\u2013i\u00a0\u00a0's\/ONBOOT=no\/ONBOOT=yes\/g' \/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/div>\n<p>sed \u2013i 's\/BOOTPROTO=dhcp\/BOOTPROTO=static\/g'\/etc\/sysconfig\/network-scripts\/ifcfg-eth0<\/p>\n<p>3\uff09\u3001\u7ed9\u7269\u7406\u63a5\u53e3\u6dfb\u52a0vlan\u5e76\u914d\u7f6evlan\u7684\u5c5e\u6027<\/p>\n<div align=\"left\">vconfig add eth010<\/div>\n<div align=\"left\">config set_flageth0.10 1 1<\/div>\n<div align=\"left\">vconfig add eth0 20<\/div>\n<div align=\"left\">config set_flag eth0.20 1 1<\/div>\n<p>4\uff09\u3001\u6dfb\u52a0eth0.10\u3001eth0.20\u5b50\u63a5\u53e3\u5e76\u6dfb\u52a0\u914d\u7f6e\u6587\u4ef6<\/p>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'DEVICE=eth0.10'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo 'TYPE=ethernet'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">echo'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<div align=\"left\">touch\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'DEVICE=eth0.20'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'ONBOOT=yes'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo 'TYPE=ethernet'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<div align=\"left\">echo'VLAN=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/div>\n<p>5\uff09\u3001\u542f\u52a8\u5b50\u63a5\u53e3<\/p>\n<div align=\"left\">ifup eth0.10<\/div>\n<div align=\"left\">ifup eth0.20<\/div>\n<p>6\uff09\u3001\u7ed9\u5b50\u63a5\u53e3\u63a5\u53e3\u914d\u7f6eIP<br \/>\necho'IPADDR=10.10.10.254'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/p>\n<div align=\"left\">echo 'NETMASK= 255.255.255.0' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth0.10<\/div>\n<p>echo'IPADDR=10.10.20.254'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<br \/>\necho 'NETMASK= 255.255.255.0'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth0.20<\/p>\n<p>7\uff09\u3001\u91cd\u542f\u7f51\u7edc<\/p>\n<div align=\"left\">service network restart<\/div>\n<div align=\"left\">8\uff09\u3001\u8bbe\u7f6e\u4e0b\u6b21\u542f\u52a8\u81ea\u52a8\u52a0\u8f7d 8021q \u6a21\u5757<br \/>\necho 'VLAN=yes' &gt;&gt; \/etc\/sysconfig\/network<\/div>\n<div align=\"left\">echo 'modprobe 8021q' &gt;&gt;\/etc\/rc.local<\/div>\n<p><strong>\uff082\uff09\u3001\u670d\u52a1\u5668eth1\u53e3\u7684\u914d\u7f6e<\/strong>1\uff09\u3001\u914d\u7f6e\u7269\u7406\u7f51\u5361<\/p>\n<div align=\"left\">sed\u00a0\u00a0\u2013i\u00a0\u00a0's\/ONBOOT=no\/ONBOOT=yes\/g' \/etc\/sysconfig\/network-scripts\/ifcfg-eth1<\/div>\n<p>sed \u2013i 's\/BOOTPROTO=dhcp\/BOOTPROTO=static\/g'\/etc\/sysconfig\/network-scripts\/ifcfg-eth1<\/p>\n<p>2\uff09\u3001\u7ed9\u7269\u7406\u63a5\u53e3\u6dfb\u52a0vlan\u5e76\u914d\u7f6evlan\u7684\u5c5e\u6027<\/p>\n<div align=\"left\">vconfig add eth1100<\/div>\n<div align=\"left\">config set_flageth1.100 1 1<\/div>\n<p>3\uff09\u3001\u6dfb\u52a0eth1.100\u5b50\u63a5\u53e3\u5e76\u6dfb\u52a0\u914d\u7f6e\u6587\u4ef6<\/p>\n<div align=\"left\">touch \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo 'DEVICE=eth1.100'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo'ONBOOT=yes'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo'BOOTPROTO=static' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo 'TYPE=ethernet'&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo'VLAN=yes'\u00a0\u00a0&gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<p>4\uff09\u3001\u542f\u52a8\u5b50\u63a5\u53e3<\/p>\n<div align=\"left\">ifup eth1.100<\/div>\n<p>5\uff09\u3001\u7ed9\u5b50\u63a5\u53e3\u63a5\u53e3\u914d\u7f6eIP<br \/>\necho'IPADDR=10.10.100.100'\u00a0\u00a0&gt;&gt;\/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/p>\n<div align=\"left\">echo 'NETMASK= 255.255.255.0' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<div align=\"left\">echo 'GATEWAY= 10.10.100.254' &gt;&gt; \/etc\/sysconfig\/network-scripts\/ifcfg-eth1.100<\/div>\n<p>6\uff09\u3001\u91cd\u542f\u7f51\u7edc<\/p>\n<div align=\"left\">service network restart<\/div>\n<div align=\"left\">7\uff09\u3001\u8bbe\u7f6e\u4e0b\u6b21\u542f\u52a8\u81ea\u52a8\u52a0\u8f7d 8021q \u6a21\u5757<\/div>\n<div align=\"left\">echo'VLAN=yes' &gt;&gt; \/etc\/sysconfig\/network<\/div>\n<div align=\"left\">echo 'modprobe 8021q' &gt;&gt;\/etc\/rc.local<\/div>\n<p><strong>\uff083\uff09\u3001\u8ba9\u670d\u52a1\u5668A\u3001B\u5185\u7684\u865a\u62df\u673a\u51fa\u7f51<\/strong><\/p>\n<div align=\"left\">iptables -t nat -A POSTROUTING -s10.10.10.0\/24 -o eth1.100 -j MASQUERADE<\/div>\n<p>iptables-t nat -A POSTROUTING -s 10.10.20.0\/24 -o eth1.100 -j MASQUERADE<\/p>\n<div align=\"left\">echo 1 &gt; \/proc\/sys\/net\/ipv4\/ip_forward<\/div>\n<p><strong>\uff084\uff09\u3001\u5916\u7f51\u8bbe\u5907\u8981\u8bbf\u95eevm1\u768480\u7aef\u53e3<\/strong><\/p>\n<div align=\"left\">iptables -t nat -A PREROUTING -p tcp -d 10.10.100.100 --dport 80-j DNAT --to-destination 10.10.10.11:80<\/div>\n<p>\u628a\u5916\u7f51\u8bbe\u5907\u8bbf\u95ee10.10.100.100\u768480\u7aef\u53e3\u6620\u5c04\u5230vm1\u8bbe\u5907\u768480\u7aef\u53e3<\/p>\n<p>&nbsp;<\/p>\n<p>\u539f\u6587\uff1a<br \/>\n<a href=\"http:\/\/www.iyunv.com\/thread-51063-1-1.html\" target=\"_blank\" rel=\"noopener\">http:\/\/www.iyunv.com\/thread-51063-1-1.html<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"ptg mbm mtn\"><\/div>\n<div><\/div>\n<div><\/div>\n<div><\/div>\n<div>..<\/div>\n<div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u3001\u7ec4\u7f51\u7ed3\u6784\u56fe\u5982\u4e0b\uff1a 1\u3001SW\u4ea4\u6362\u673a\u548cHUB 1)\u3001\u4ea4\u6362\u673a\u8fde\u63a5HUB\u7684\u7aef\u53e3\u4e3atr &hellip; <a href=\"https:\/\/www.xiaobo.li\/notes\/archives\/1308\">\u7ee7\u7eed\u9605\u8bfb <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[287],"tags":[],"class_list":["post-1308","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/posts\/1308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/comments?post=1308"}],"version-history":[{"count":0,"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/posts\/1308\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/media?parent=1308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/categories?post=1308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xiaobo.li\/notes\/wp-json\/wp\/v2\/tags?post=1308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}