obsidian/技术支持/异地组网/异地组网.md

---

notion-id: 24fca4d7-cb7b-8047-99ca-e21106b59c

Easytier配置 Zerotier局域网配置 Tailscale 配置

[!note]+ ### 开启端口转发 查看是否开启端口转发

> sysctl net.ipv4.ip_forward
> ```
> 查看永久配置
> ```bash
> /etc/sysctl.conf 
> ```
> 开启永久端口转发
> ```bash
> echo "net.ipv4.ip_forward=1" | sudo tee -a /etc/sysctl.conf
> ```
> 重新加载
> ```bash
> sudo sysctl -p
> ```
> 再次查看即可
> [!note]+ ### 路由表配置
> ```javascript
> root@Princess:~# ip route 
> default via 10.10.10.252 dev bond0 src 10.10.10.23 10.10.10.0/24 dev bond0 proto kernel scope link src 10.10.10.23 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 172.18.0.0/16 dev docker-7cc29e8c proto kernel scope link src 172.18.0.1 192.168.5.0/24 dev zt6jy5fync scope link 192.168.5.0/24 via 192.168.192.223 dev zt6jy5fync proto static metric 5000 192.168.192.0/24 dev zt6jy5fync proto kernel scope link src 192.168.192.240
> ```
## 问题合计
### 一、无法ping通设备，或者无法正常的局域网连通，检查两台设备的路由表

javascript ip route 如果出现 192.168.5.0/24 dev zt6jy5fync scope link

表示直接连接（scope link）表示直接认为这个网段就在本地接口上

将报错如下： root@Princess:~# ping 192.168.5.1 PING 192.168.5.1 (192.168.5.1) 56(84) bytes of data. From 192.168.192.240 icmp_seq=1 Destination Host Unreachable From 192.168.192.240 icmp_seq=2 Destination Host Unreachable From 192.168.192.240 icmp_seq=3 Destination Host Unreachable

使用指令删除 ip route del 192.168.5.0/24 dev zt6jy5fync

清空缓存 ip neigh flush dev zt6jy5fync

##删除指令 sudo ip route del 192.168.1.0/24 dev zt6jy5fync scope link

sudo ip route del 192.168.1.0/24 via 192.168.192.47 dev zt6jy5fync

### 二、无法正常访问http
查看防火墙是否配置完成

bash iptables -L -n -v

输出结果包含：

bash Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination

0     0 ACCEPT     all  --  ovs_bond0  *       0.0.0.0/0            0.0.0.0/0
0     0 ACCEPT     all  --  *        ovs_bond0  0.0.0.0/0            0.0.0.0/0
0     0 ACCEPT     all  --  tailscale0 *       0.0.0.0/0            0.0.0.0/0
0     0 ACCEPT     all  --  *        tailscale0 0.0.0.0/0            0.0.0.0/0

群晖部署文件：

sql 公司群晖部署 sleep 1m iptables -I FORWARD -i eth1 -j ACCEPT iptables -I FORWARD -o eth1 -j ACCEPT iptables -t nat -I POSTROUTING -o eth1 -j MASQUERADE iptables -I FORWARD -i zt6jy5fyn -j ACCEPT iptables -I FORWARD -o zt6jy5fyn -j ACCEPT iptables -t nat -I POSTROUTING -o zt6jy5fyn -j MASQUERADE

家庭群晖部署 sleep 1m iptables -I FORWARD -i bond0 -j ACCEPT iptables -I FORWARD -o bond0 -j ACCEPT iptables -t nat -I POSTROUTING -o bond0 -j MASQUERADE iptables -I FORWARD -i zt6jy5fyn -j ACCEPT iptables -I FORWARD -o zt6jy5fyn -j ACCEPT iptables -t nat -I POSTROUTING -o zt6jy5fyn -j MASQUERADE ```