--- notion-id: 24fca4d7-cb7b-8047-99ca-e21106b59c85 --- [Easytier配置](家庭实验室/网络工具/Easytier配置.md) [Zerotier局域网配置](家庭实验室/网络工具/Zerotier局域网配置.md) [Tailscale 配置](家庭实验室/网络工具/Tailscale%20配置.md) > [!note]+ ### 开启端口转发 > 查看是否开启端口转发 > ```bash > sysctl net.ipv4.ip_forward > ``` > 查看永久配置 > ```bash > /etc/sysctl.conf > ``` > 开启永久端口转发 > ```bash > echo "net.ipv4.ip_forward=1" | sudo tee -a /etc/sysctl.conf > ``` > 重新加载 > ```bash > sudo sysctl -p > ``` > 再次查看即可 > [!note]+ ### 路由表配置 > ```javascript > root@Princess:~# ip route > default via 10.10.10.252 dev bond0 src 10.10.10.23 10.10.10.0/24 dev bond0 proto kernel scope link src 10.10.10.23 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 172.18.0.0/16 dev docker-7cc29e8c proto kernel scope link src 172.18.0.1 192.168.5.0/24 dev zt6jy5fync scope link 192.168.5.0/24 via 192.168.192.223 dev zt6jy5fync proto static metric 5000 192.168.192.0/24 dev zt6jy5fync proto kernel scope link src 192.168.192.240 > ``` ## 问题合计 ### 一、无法ping通设备,或者无法正常的局域网连通,检查两台设备的路由表 ```javascript ip route 如果出现 192.168.5.0/24 dev zt6jy5fync scope link # 表示直接连接(scope link)表示直接认为这个网段就在本地接口上 将报错如下: root@Princess:~# ping 192.168.5.1 PING 192.168.5.1 (192.168.5.1) 56(84) bytes of data. From 192.168.192.240 icmp_seq=1 Destination Host Unreachable From 192.168.192.240 icmp_seq=2 Destination Host Unreachable From 192.168.192.240 icmp_seq=3 Destination Host Unreachable 使用指令删除 ip route del 192.168.5.0/24 dev zt6jy5fync 清空缓存 ip neigh flush dev zt6jy5fync ##删除指令 sudo ip route del 192.168.1.0/24 dev zt6jy5fync scope link sudo ip route del 192.168.1.0/24 via 192.168.192.47 dev zt6jy5fync ``` ### 二、无法正常访问http 查看防火墙是否配置完成 ```bash iptables -L -n -v ``` 输出结果包含: ```bash Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- ovs_bond0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * ovs_bond0 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- tailscale0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * tailscale0 0.0.0.0/0 0.0.0.0/0 ``` 群晖部署文件: ```sql 公司群晖部署 sleep 1m iptables -I FORWARD -i eth1 -j ACCEPT iptables -I FORWARD -o eth1 -j ACCEPT iptables -t nat -I POSTROUTING -o eth1 -j MASQUERADE iptables -I FORWARD -i zt6jy5fyn -j ACCEPT iptables -I FORWARD -o zt6jy5fyn -j ACCEPT iptables -t nat -I POSTROUTING -o zt6jy5fyn -j MASQUERADE 家庭群晖部署 sleep 1m iptables -I FORWARD -i bond0 -j ACCEPT iptables -I FORWARD -o bond0 -j ACCEPT iptables -t nat -I POSTROUTING -o bond0 -j MASQUERADE iptables -I FORWARD -i zt6jy5fyn -j ACCEPT iptables -I FORWARD -o zt6jy5fyn -j ACCEPT iptables -t nat -I POSTROUTING -o zt6jy5fyn -j MASQUERADE ```