前言

装了台pc，插了个多口的pcie网卡准备当作服务器用。其中一个lan口连接外网（isp提供ipv6），另外的口用作其他pc、网络设备的连入。

 enp24s0:
enp28s0f1: flags=4675<UP,BROADCAST,RUNNING,ALLMULTI,MULTICAST>  mtu 1500
        inet 172.16.29.18  netmask 255.255.254.0  broadcast 172.16.29.255
        inet6 2001:da8:d805:a210:xxx  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::bbd3:ac0f:5494:a360  prefixlen 64  scopeid 0x20<link>
        inet6 2001:da8:d805:a210:xxx  prefixlen 64  scopeid 0x0<global>
        ether d4:85:64:56:0b:c6  txqueuelen 1000  (以太网)
        RX packets 134061  bytes 82264879 (82.2 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 76373  bytes 12021743 (12.0 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

即enp28s0f1对应外网连接，enp24s0对应内网。

ip设置

因为装的是ubuntu 桌面版 要先将network-manager 关闭，否则可能/etc/network/下的设置不生效。

systemctl stop network-manager.service

给enp24s0分配ip,

$vim /etc/network/interface

编辑如下

auto lo
iface lo inet loopback

auto enp24s0
iface enp24s0 inet static
address 192.168.100.1
netmask 255.255.255.0
broadcast 192.168.100.255

auto enp24s0
iface enp24s0 inet6 static
address 2001:da8:d805:a210:a1::1
netmask 64

安装dhcp,

$sudo apt install isc-dhcp-server

修改

$ sudo vim /etc/default/isc-dhcp-server

为

INTERFACESv4="enp24s0"
INTERFACESv6=""

配置 /etc/dhcp/dhcpd.conf 文件：

option domain-name "example.org";

default-lease-time 600;
max-lease-time 7200;


ddns-update-style none;

subnet 192.168.100.0 netmask 255.255.255.0 {
        range 192.168.100.188 192.168.100.230;
        option routers 192.168.100.1;
        option subnet-mask 255.255.255.0;
        option broadcast-address 192.168.100.255;
        option domain-name-servers 114.114.114.114;
        option ntp-servers 192.168.100.1;
        option netbios-name-servers 192.168.100.1;
}

重启 服务

$ sudo service isc-dhcp-server restart

ipv4 转发

编辑 /etc/sysctl.conf, 取消net.ipv4.ip_forward=1的注释,这里net.ipv6.conf.all.forwarding=1也一并打开

$sysctl -p

使设置生效
使用iptables转发

$sudo iptables -t nat -A POSTROUTING -o enp28s0f1 -j MASQUERADE
$sudo iptables -A FORWARD -i enp28s0f1 -o enp24s0 -m state --state RELATED,ESTABLISHED -j ACCEPT
$sudo iptables -A FORWARD -i enp24s0 -o enp28s0f1 -j ACCEPT

iptables 规则重启会失效
重启生效 参考:

保存规则：#iptables-save >/etc/iptables-script
恢复规则：#iptables-restore>/etc/iptables-script
开机自动恢复规则，把恢复命令添加到启动脚本：echo ‘/sbin/iptables-restore /etc/iptables-script’ >>/etc/rc.d/rc.local

至此另外一台pc连接enp24s0 lan口自动获取ip,已经可以上网了.

ipv6

安装radvd

$ apt install radvd

这里radvd的配置文件需要新建

$ vim /etc/radvd.conf

内容

interface enp24s0 {
        AdvSendAdvert on;
        MinRtrAdvInterval 3;
        MaxRtrAdvInterval 10;
        prefix 2001:da8:d805:a210:a1::/64{
        };
};

重启radvd

$/etc/init.d/radvd restart