机房服务器：
[[email protected] ~]# ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:59:58:f6 brd ff:ff:ff:ff:ff:ff inet 192.168.56.11/24 brd 192.168.56.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fe59:58f6/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:59:58:00 brd ff:ff:ff:ff:ff:ff inet 10.10.11.1/24 brd 10.10.11.255 scope global eth1 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fe59:5800/64 scope link valid_lft forever preferred_lft forever [[email protected] ~]#
公司
[[email protected] network-scripts]# ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:e3:29:23 brd ff:ff:ff:ff:ff:ff inet 192.168.56.10/24 brd 192.168.56.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fee3:2923/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:e3:29:2d brd ff:ff:ff:ff:ff:ff inet 10.10.10.1/24 brd 10.10.10.255 scope global eth1 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fee3:292d/64 scope link valid_lft forever preferred_lft forever [[email protected] network-scripts]#
两台机器都开启路由转发的功能
[[email protected] network-scripts]# echo "net.ipv4.ip_forward=1" >>/etc/sysctl.conf [[email protected] network-scripts]# sysctl -p net.ipv4.ip_forward = 1 [[email protected] network-scripts]#
公司服务器（192.168.56.10）
[[email protected] network-scripts]# ip tunnel add tunnel2 mode gre local 192.168.56.10 remote 192.168.56.11 ttl 255 dev eth0 [[email protected] network-scripts]# ip addr add 172.16.33.2 dev tunnel2 peer 172.16.33.1/24 [[email protected] network-scripts]# ip link set dev tunnel2 up [[email protected] network-scripts]# ip route add 10.10.11.0/24 dev tunnel2 [[email protected] network-scripts]#
机房（192.168.56.11）
[[email protected] network-scripts]# ip tunnel add tunnel2 mode gre local 192.168.56.11 remote 192.168.56.10 ttl 255 dev eth0 [[email protected] network-scripts]# ip addr add 172.16.33.1 dev tunnel2 peer 172.16.33.2/24 [[email protected] network-scripts]# ip link set dev tunnel2 up [[email protected] network-scripts]# ip route add 10.10.10.0/24 dev tunnel2 [[email protected] network-scripts]#
测试：在192.168.56.11
[[email protected] ~]# ping 10.10.10.1 PING 10.10.10.1 (10.10.10.1) 56(84) bytes of data. 64 bytes from 10.10.10.1: icmp_seq=1 ttl=64 time=0.461 ms 64 bytes from 10.10.10.1: icmp_seq=2 ttl=64 time=0.630 ms 64 bytes from 10.10.10.1: icmp_seq=3 ttl=64 time=0.410 ms ^C --- 10.10.10.1 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 0.410/0.500/0.630/0.095 ms [[email protected] ~]#
测试在 192.168.56.10
[[email protected] network-scripts]# ping 10.10.11.1 PING 10.10.11.1 (10.10.11.1) 56(84) bytes of data. 64 bytes from 10.10.11.1: icmp_seq=1 ttl=64 time=1.08 ms 64 bytes from 10.10.11.1: icmp_seq=2 ttl=64 time=0.766 ms 64 bytes from 10.10.11.1: icmp_seq=3 ttl=64 time=0.439 ms ^C --- 10.10.11.1 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 0.439/0.761/1.080/0.263 ms [[email protected] network-scripts]#
公司的另外一台服务器测试（10.10.10.2 ），可以看出测试额没问题
内网服务器的网关要指向
10.10.10.1
公司出口的外网服务器上的内网地址
[[email protected] ~]# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.10.10.2 netmask 255.255.255.0 broadcast 10.10.10.255 inet6 fe80::20c:29ff:fe7d:4126 prefixlen 64 scopeid 0x20<link> ether 00:0c:29:7d:41:26 txqueuelen 1000 (Ethernet) RX packets 46 bytes 6385 (6.2 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 62 bytes 8627 (8.4 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 2 bytes 200 (200.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 2 bytes 200 (200.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [[email protected] ~]# route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.10.10.1 0.0.0.0 UG 0 0 0 eth0 10.10.10.0 0.0.0.0 255.255.255.0 U 100 0 0 eth0 [[email protected] ~]# ping 10.10.11.1 PING 10.10.11.1 (10.10.11.1) 56(84) bytes of data. 64 bytes from 10.10.11.1: icmp_seq=1 ttl=63 time=0.797 ms 64 bytes from 10.10.11.1: icmp_seq=2 ttl=63 time=1.06 ms 64 bytes from 10.10.11.1: icmp_seq=3 ttl=63 time=1.21 ms 64 bytes from 10.10.11.1: icmp_seq=4 ttl=63 time=1.01 ms 64 bytes from 10.10.11.1: icmp_seq=5 ttl=63 time=1.04 ms ^C --- 10.10.11.1 ping statistics --- 5 packets transmitted, 5 received, 0% packet loss, time 4006ms rtt min/avg/max/mdev = 0.797/1.024/1.211/0.138 ms [[email protected] ~]#
时间： 2024-12-20 14:55:46