linux 高级路由控制-让内部选择通过某一网卡访问Internet

yimu1023

服务器有两个网卡eth0和eth2，都可访问internet.
[root@layer7 sched]# ip add ls
1: lo:  mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0:  mtu 1500 qdisc htb qlen 1000
    link/ether 00:0c:29:6c:d4:00 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.212/24 brd 192.168.0.255 scope global eth0
    inet6 fe80::20c:29ff:fe6c:d400/64 scope link
       valid_lft forever preferred_lft forever
3: eth1:  mtu 1500 qdisc htb qlen 1000
    link/ether 00:0c:29:6c:d4:0a brd ff:ff:ff:ff:ff:ff
    inet 192.168.168.212/24 brd 192.168.168.255 scope global eth1
    inet6 fe80::20c:29ff:fe6c:d40a/64 scope link
       valid_lft forever preferred_lft forever
4: eth2:  mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0c:29:6c:d4:14 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.212/24 brd 10.0.0.255 scope global eth2
    inet6 fe80::20c:29ff:fe6c:d414/64 scope link
       valid_lft forever preferred_lft forever
5: sit0:  mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
为内部192.168.168.0/24这一网段走192.168.0.1这一网关上网.
[root@layer7 sched]#echo 200 www >> /etc/iproute2/rt_tables
[root@layer7 sched]#ip rule add from 192.168.168.0/24 table www
[root@layer7 sched]# ip rule ls
0:      from all lookup 255
32765:  from 192.168.168.0/24 lookup www
32766:  from all lookup main
32767:  from all lookup default
现在，为 www 的路由表创建路由项了。别忘了刷新路由缓存：
[root@layer7 sched]# ip route add default via 192.168.0.1 dev eth0 table www
[root@layer7 sched]# ip route flush cache
---------------
[root@layer7 sched]# ip route ls table main
10.0.0.0/24 dev eth2  proto kernel  scope link  src 10.0.0.212
192.168.0.0/24 dev eth0  proto kernel  scope link  src 192.168.0.212
192.168.168.0/24 dev eth1  proto kernel  scope link  src 192.168.168.212
169.254.0.0/16 dev eth0  scope link
--------
[root@layer7 sched]# ip route ls table local
local 192.168.168.212 dev eth1  proto kernel  scope host  src 192.168.168.212
broadcast 192.168.0.255 dev eth0  proto kernel  scope link  src 192.168.0.212
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1
broadcast 192.168.168.0 dev eth1  proto kernel  scope link  src 192.168.168.212
broadcast 10.0.0.0 dev eth2  proto kernel  scope link  src 10.0.0.212
local 10.0.0.212 dev eth2  proto kernel  scope host  src 10.0.0.212
broadcast 192.168.0.0 dev eth0  proto kernel  scope link  src 192.168.0.212
broadcast 192.168.168.255 dev eth1  proto kernel  scope link  src 192.168.168.212
local 192.168.0.212 dev eth0  proto kernel  scope host  src 192.168.0.212
broadcast 10.0.0.255 dev eth2  proto kernel  scope link  src 10.0.0.212
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1


本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u3/103318/showart_2145716.html