配置手动提交_【路由配置】完全开源免费路由器VyOS基础上网配置NATDHCP路由

曾经终败给现在 2022-11-19 11:19 1770阅读 0赞

**点击蓝字 关注我们**

![8d02de6ebd42081cbfbd1ae75461e2ca.png][] ![495c1e6b81fe87f4954e5881f6d236b8.png][]

**如图所示，**

VyOS路由器作为整个网络进入Internet的出口。

首先通过X-Shell登陆进VyOS路由器。

**首先我们看看配置命令以及解释：**

默认用户名:vyos

默认密码：vyos

show interfaces //查看接口ip地址

configure //进入全局配置模式

show //查看所有配置

delete interfaces //删除接口配置

commit //提交，让配置生效

set interfaces ethernet eth0 address DHCP //会自动获取一个192.168.1.0/24网段的IP，网关为192.168.1.1

set interfaces ethernet eth1 address 202.100.1.1/24

show

commit

ping 202.100.1.10 //测试连通性

ping 192.168.1.1 //测试连通性

save //保存配置到启动配置

show configuration commands查看配置(不要在配置模式下show配置)

配置默认/静态路由

set protocols static route 0.0.0.0/0 next-hop 192.168.1.1

//其实DHCP会自动获取一条默认，也可以不手动写

commit

show

ping 192.168.1.1

ping 10.1.1.101

delete protocols......

配置PAT

set nat source rule 1 source address 0.0.0.0/0 //匹配需要被执行NAT的流量

set nat source rule 1 outbound-interface eth0 //转为为eth0接口IP地址出去

set nat source rule 1 translation address masquerade //地址转换

commit

show nat source translations

使用vyos配置简单的dhcp服务器(这里就不配置DHCP了)

**主要步骤：**

**1、配置dhcp服务名称，并使能dhcp**

set service dhcp-server shared-network-name mydhcp authoritative 'enable'

**2、配置dhcp服务使用的子网段10.1.1.0/24和客户端将要获取的网关10.1.1.10**

set service dhcp-server shared-network-name mydhcp subnet 10.1.1.0/24 default-router 10.1.1.10

**3、配置客户端将要获取的dns服务器，有多个dns时可以配置多条。**

set service dhcp-server shared-network-name mydhcp subnet 10.1.1.0/24 dns-server '202.99.96.68'

**4、配置地址租期，单位秒，默认一天。**

set service dhcp-server shared-network-name mydhcp subnet 10.1.1.0/24 lease '86400'

**5、配置允许分配出去的IP地址范围**

set service dhcp-server shared-network-name mydhcp subnet 10.1.1.0/24 start 10.1.1.2 stop 10.1.1.250

**配置完成后记得commit提交，并保存save。**

vyos@vyos\# show service dhcp-server

shared-network-name mydhcp \{

authoritative enable

subnet 10.1.1.0/24 \{

default-router 10.1.1.1

dns-server 202.99.96.68

lease 86400

start 10.1.1.2 \{

stop 10.1.1.250

**下面开始配置VyOS路由器：**

vyos@vyos\# set interfaces ethernet eth0 address 202.100.1.1/24

vyos@vyos\# set interfaces ethernet eth1 address dhcp

vyos@vyos\# commit

配置完两个接口可以查看一下地址和路由：

![ac5c5ec436b310e12392bd771690f5b5.png][]

可以看到eth1接口已经通过DHCP获取到了192.168.1.78的IP地址并且获取到一条默认路由指向192.168.1.1

![ad02386836bebd02eadbc8fb81bd549c.png][]

**做两台给DMZ区域和Inside区域回包的静态路由：**

vyos@vyos\# set protocols static route 192.168.2.0/24 next-hop 202.100.1.10

vyos@vyos\# set protocols static route 10.1.1.0/24 next-hop 202.100.1.10

vyos@vyos\# commit

![ce0d2e1a611172ee6f78427cde4cb8e2.png][]

做NAT，保证192.168.2.0和10.1.1.0网段的设备可以转换为VyOS的eth1接口出去。

vyos@vyos\# set nat source rule 1 source address 0.0.0.0/0

vyos@vyos\# set nat source rule 1 outbound-interface eth1

vyos@vyos\# set nat source rule 1 translation address masquerade

vyos@vyos\# commit

**注意：vFTD已经配置完毕，并且主机也配置完毕，下面测试一下主机能否上网：**

![f90fd69468be460022b25dba0a7b4960.png][]

ok！成功！

![eb98fddacb42de240b70c945cc9aa9f4.gif][] ![ea4c73f4-5454-eb11-8da9-e4434bdf6706.svg][] ![16814ab5b09d806a2c67eb2464ba0269.png][] ![2b0ce98aef5084da15bc9dc2dc68e0a4.png][]

扫码加老师

获取小白专属福利

[8d02de6ebd42081cbfbd1ae75461e2ca.png]: https://img-blog.csdnimg.cn/img_convert/8d02de6ebd42081cbfbd1ae75461e2ca.png
[495c1e6b81fe87f4954e5881f6d236b8.png]: /images/20221119/ba4c6c69a0c64cb7a3c91e441ffe24ea.png
[ac5c5ec436b310e12392bd771690f5b5.png]: /images/20221119/f98a5c3f1e04433db3d7289f72505ef2.png
[ad02386836bebd02eadbc8fb81bd549c.png]: /images/20221119/641cbcc864bb41049f0904d2209065c5.png
[ce0d2e1a611172ee6f78427cde4cb8e2.png]: /images/20221119/9db493ed3a3042dcb329cee8106bf9d7.png
[f90fd69468be460022b25dba0a7b4960.png]: /images/20221119/921c17e8a7de45d1b3683dadf361a6ef.png
[eb98fddacb42de240b70c945cc9aa9f4.gif]: https://img-blog.csdnimg.cn/img_convert/eb98fddacb42de240b70c945cc9aa9f4.gif
[ea4c73f4-5454-eb11-8da9-e4434bdf6706.svg]: http://p01.5ceimg.com/content/ea4c73f4-5454-eb11-8da9-e4434bdf6706.svg
[16814ab5b09d806a2c67eb2464ba0269.png]: https://img-blog.csdnimg.cn/img_convert/16814ab5b09d806a2c67eb2464ba0269.png
[2b0ce98aef5084da15bc9dc2dc68e0a4.png]: /images/20221119/ffe69bcd335c4a3a91d4c7f60cd6d890.png