多网卡跨网段通信VMware+KVM

野性酷女 2023-02-09 11:58 21阅读 0赞

**网络拓朴**  
![网络拓朴][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1_size_16_color_FFFFFF_t_70_pic_center]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1_size_16_color_FFFFFF_t_70_pic_center 1]

**实验环境：**  
真机：Windows VMware  
Client1: 网卡ens33(桥接)  
Client2: 网卡ens33(NAT)  
KVM：网卡ens33,ens34  
所有机器开启firewalld并设置Trusted默认区域：  
\[root@xxxx ~\]\# firewall-cmd set-default-zone=trusted  
**操作：**  
Client1客户端

[root@client1~]# route add -net 192.168.27.0/24 gw 192.168.1.133
    [root@client1~]# route add -net 192.168.122.0/24 gw 192.168.1.133

Client2客户端

[root@client2~]# route add -net 192.168.122.0/24 gw 192.168.27.132
    [root@client2~]# route add -net 192.168.1.0/24 gw 192.168.27.132

KVM

[root@kvm~]# echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf
    [root@kvm~]# route add -net 192.168.1.0/24 gw 0.0.0.0 dev ens34
    [root@kvm~]# route add -net 192.168.27.0/24 gw 0.0.0.0 dev ens33
    [root@kvm~]# route add -net 192.168.122.0/24 gw 0.0.0.0 dev virbr0
    [root@kvm~]# iptables -P INPUT ACCEPT
    [root@kvm~]# iptables -P FORWARD ACCEPT
    [root@kvm~]# iptables -t nat -A POSTROUTING -j MASQUERADE

**测试(每台机器安装httpd服务进行测试)**  
Client2(192.168.27.128)请求Client1(192.168.1.200)、KVM(192.168.1.133)、node1(192.168.122.119)http服务  
![在这里插入图片描述][20200518211245102.png_pic_center]

--------------------

Client1(192.168.1.200)请求KVM(192.168.27.132)、node1(192.168.122.119)、node2(192.168.122.210)http服务  
![在这里插入图片描述][20200518211426175.png_pic_center]

--------------------

KVM(192.168.27.132)请求Client(192.168.1.200)、node1(192.168.122.119)、node2(192.168.122.210)http服务  
![在这里插入图片描述][20200518211543254.png_pic_center]

--------------------

node1请求Client(192.168.1.200)、KVM(192.168.27.132)、node2(192.168.122.210)http服务  
![在这里插入图片描述][20200518211556929.png_pic_center]

--------------------

node2同上

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1_size_16_color_FFFFFF_t_70_pic_center]: https://img-blog.csdnimg.cn/20200518210554219.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1_size_16_color_FFFFFF_t_70_pic_center 1]: https://img-blog.csdnimg.cn/20200518212204671.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM4OTAwNTY1,size_16,color_FFFFFF,t_70#pic_center
[20200518211245102.png_pic_center]: https://img-blog.csdnimg.cn/20200518211245102.png#pic_center
[20200518211426175.png_pic_center]: https://img-blog.csdnimg.cn/20200518211426175.png#pic_center
[20200518211543254.png_pic_center]: https://img-blog.csdnimg.cn/20200518211543254.png#pic_center
[20200518211556929.png_pic_center]: https://img-blog.csdnimg.cn/20200518211556929.png#pic_center