
平台论坛博客文库

› 论坛 › 操作系统 › Linux系统管理 › 多个外网IP的NAT问题

12 3 4 / 4 页下一页

[网络管理] 多个外网IP的NAT问题 [复制链接]

springwind426

小富即安

论坛徽章:: 0

1楼 [报告]

发表于 2007-10-18 21:11 |只看该作者

假设：
你的公网IP是 xxx.xxx.xxx.n1-n2 (一共30个连续的IP)
外网卡是eth0
150个内网用户的IP是192.168.0.1-192.168.0.150

for((i=n1;i<=n2;i++))
do
ip addr add xxx.xxx.xxx.${i} dev eth0
done
#第一个循环，添加IP（[color=Magenta]需要iproute2这个软件包[/color]），如果已经使用其他的方式，比如系统的网卡配置工具设置过那30个IP，就可以不要这个循环了
iptables -t nat -F POSTEROUTING #清空原来POSTROUTING链中的所有规则，（这个需要视情况而定）
for((i=1;i<=150;i++))
do
((j=(i-1)/5+n1))
iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.${i} -j SNAT --to xxx.xxx.xxx.${j}
done
#第二个循环，按照顺序，每5个IP，映射到一个外网IP上
(( )) 这是一个计算标志，表示内部是进行算术运算
j=(i-1)/5+n1 (i-1)/5 能够保证每5个IP获取到不同的j值，bash中的计算是取整的， +n1 就是映射到实际的那个IP上（[color=Magenta]原来的程序部分有错误，在此修正[/color]）
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to xxx.xxx.xxx.${j} 此处${j} 会使用j实际的值进行替换，然后再执行iptables命令

复制代码

不知是否可行？

修改原因：添加说明和修正部分错误

[ 本帖最后由 springwind426 于 2007-10-19 09:03 编辑 ]

xeonpc

白手起家

论坛徽章:: 0

2楼 [报告]

发表于 2007-10-18 23:39 |只看该作者

我是新手
烦请老大告诉我这些代码怎么用。呵呵

实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？

kenduest

荣誉版主

论坛徽章:: 0

3楼 [报告]

发表于 2007-10-18 23:55 |只看该作者

原帖由 xeonpc 于 2007-10-18 23:39 发表
我是新手
烦请老大告诉我这些代码怎么用。呵呵

建議你學 shell script 與一些 shell 變量使用，還有 ip, iptables 命令使用語法，這樣該片段 code 就可以看得懂。

--

xeonpc

白手起家

论坛徽章:: 0

4楼 [报告]

发表于 2007-10-19 00:49 |只看该作者

这个可以实现我所说的功能么？

xeonpc

白手起家

论坛徽章:: 0

5楼 [报告]

发表于 2007-10-19 01:13 |只看该作者

执行完这段代码是这样的

[root@localhost ~]# cat /etc/sysconfig/iptables
# Generated by iptables-save v1.2.11 on Fri Oct 19 01:10:58 2007
*filter
:INPUT ACCEPT [762966:80569415]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [796979:478510599]
-A FORWARD -j ACCEPT
COMMIT
# Completed on Fri Oct 19 01:10:58 2007
# Generated by iptables-save v1.2.11 on Fri Oct 19 01:10:58 2007
*nat
:PREROUTING ACCEPT [19429:1276005]
:POSTROUTING ACCEPT [47:5250]
:OUTPUT ACCEPT [26:3039]
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2-210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.0
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.0
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.0
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.0
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.0
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.1
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.1
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.1
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.1
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.1
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.3
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.3
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.3
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.3
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.3
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.4
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.5
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.5
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.5
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.5
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.5
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.6
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.6
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.6
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.6
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.6
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.7
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.7
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.7
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.7
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.7
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.8
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.8
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.8
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.8
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.8
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.9
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.9
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.9
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.9
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.9
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.10
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.10
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.10
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.10
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.10
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.11
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.11
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.11
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.11
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.11
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.12
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.12
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.12
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.12
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.12
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.13
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.13
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.13
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.13
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.13
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.14
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.14
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.14
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.14
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.14
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.15
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.15
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.15
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.15
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.15
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.16
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.16
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.16
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.16
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.16
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.17
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.17
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.17
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.17
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.17
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.18
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.18
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.18
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.18
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.18
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.19
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.19
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.19
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.19
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.19
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.20
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.20
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.20
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.20
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.20
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.21
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.21
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.21
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.21
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.21
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.22
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.22
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.22
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.22
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.22
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.23
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.23
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.23
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.23
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.23
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.24
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.24
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.24
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.24
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.24
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.25
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.25
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.25
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.25
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.25
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.26
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.26
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.26
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.26
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.26
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.27
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.27
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.27
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.27
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.27
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.28
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.28
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.28
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.28
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.28
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.29
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.29
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.29
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.29
-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.29
COMMIT
# Completed on Fri Oct 19 01:10:58 2007
[root@localhost ~]#

复制代码

springwind426

小富即安

论坛徽章:: 0

6楼 [报告]

发表于 2007-10-19 09:00 |只看该作者

-A POSTROUTING -o eth0 -j SNAT --to-source 210.*.77.2-210.*.77.4

需要在防火墙中把这句去掉

ssffzz1

广告杀手

论坛徽章:: 5

7楼 [报告]

发表于 2007-10-19 09:24 |只看该作者

LZ你没有说清除30个IP是外网的30个IP地址，还是内网的5个网段每个网段分了30个IP。

xeonpc

白手起家

论坛徽章:: 0

8楼 [报告]

发表于 2007-10-19 12:08 |只看该作者

30个外网IP。
让内网的 150个用户每5个内网用户NAT到一个外网IP上
比如
10.0.0.2 ->210.*.77.2
10.0.0.3 ->210.*.77.2
10.0.0.4 ->210.*.77.2
10.0.0.5 ->210.*.77.2
10.0.0.6 ->210.*.77.2

10.0.0.7 ->210.*.77.3
10.0.0.8 ->210.*.77.3
10.0.0.9 ->210.*.77.3
10.0.0.10 ->210.*.77.3
10.0.0.11 ->210.*.77.3