[gentoo-user-ru] Advanced router: VPN + NAT

[Antonio]

úÄÒÁ×ÓÔ×ÕÊ, All.

îÅ ÍÏÇÕ ÕÓÔÁÎÏ×ÉÔØ VPN ÓÏÅÄÉÎÅÎÉÅ ÞÅÒÅÚ ÍÁÒÛÒÕÔÉÚÁÔÏÒ Ó NAT, Ô.Ë.
ÍÁÒÛÒÕÔÉÚÁÔÏÒ ÒÕÂÉÔ ÐÁËÅÔÙ ÎÁ ÏÂÒÁÔÎÏÍ ÐÕÔÉ.
ðÒÏ×ÁÊÄÅÒ ×ÙÄÅÌÉÌ ÍÎÅ ÏÄÉÎ IP É ÐÏÜÔÏÍÕ Ñ ÎÅ ÍÏÇÕ ÏÂÏÊÔÉÓØ ÂÅÚ NAT.

eth0 - ÍÏÑ ÓÅÔØ
eth1 - ÓÅÔØ ÐÒÏ×ÁÊÄÅÒÁ
Ñ ÄÅÌÁÀ ÔÁË (ÎÁ ÒÏÕÔÅÒÅ):
root# iptables -t nat -F
root# iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

äÁÌÅÅ Ñ ÐÉÎÇÕÀ ÉÚ Ó×ÏÅÊ ÓÅÔÉ VPN É ×Ó£ ÐÒÅËÒÁÓÎÏ. úÁÔÅÍ Ñ ÐÙÔÁÀÓØ
ÕÓÔÁÎÏ×ÉÔØ PPTP ÓÏÅÄÉÎÅÎÉÅ:

lanuser$ pptp-command-start

É ÐÒÉ ÜÔÏÍ ÓÍÏÔÒÀ, × ethereal Ó ÒÏÕÔÅÒÁ:

servak root #  tethereal -i eth1
Capturing on eth1
  0.000000 AniCommu_9a:03:7e -> Broadcast    ARP Who has
10.255.10.254?  Tell 10.255.10.11
  0.000251 Peripher_06:fe:80 -> AniCommu_9a:03:7e ARP 10.255.10.254 is
at 00:60:52:06:fe:80
  0.000290 10.255.10.11 -> 10.0.15.10   TCP 32771 > 1723 [SYN] Seq=0
Ack=0 Win=5840 Len=0 MSS=1460 TSV=1361978 TSER=0 WS=2
  0.009925   10.0.15.10 -> 10.255.10.11 TCP 1723 > 32771 [SYN, ACK]
Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 WS=0
  0.010215 10.255.10.11 -> 10.0.15.10   TCP 32771 > 1723 [ACK] Seq=1
Ack=1 Win=5840 Len=0
  0.010595 10.255.10.11 -> 10.0.15.10   PPTP Start-Control-Connection-Request
  0.018978   10.0.15.10 -> 10.255.10.11 TCP 1723 > 32771 [ACK] Seq=1
Ack=157 Win=5840 Len=0
  0.022423   10.0.15.10 -> 10.255.10.11 PPTP Start-Control-Connection-Reply
  0.022603 10.255.10.11 -> 10.0.15.10   TCP 32771 > 1723 [ACK] Seq=157
Ack=157 Win=5840 Len=0
  1.011884 10.255.10.11 -> 10.0.15.10   PPTP Outgoing-Call-Request
  1.034907   10.0.15.10 -> 10.255.10.11 PPTP Outgoing-Call-Reply
  1.035096 10.255.10.11 -> 10.0.15.10   TCP 32771 > 1723 [ACK] Seq=325
Ack=189 Win=5840 Len=0
  1.050698   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
  4.034409   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
  5.000632 Peripher_06:fe:80 -> AniCommu_9a:03:7e ARP Who has
10.255.10.11?  Tell 10.255.10.254
  5.000713 AniCommu_9a:03:7e -> Peripher_06:fe:80 ARP 10.255.10.11 is
at 00:40:05:9a:03:7e
  7.046198   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 10.057836   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 13.073387   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 16.073854   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 19.095401   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 22.098699   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 25.099888   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 28.109591   10.0.15.10 -> 10.255.10.11 PPP LCP Configuration Request
 31.135193   10.0.15.10 -> 10.255.10.11 TCP 1723 > 32771 [FIN, ACK]
Seq=189 Ack=325 Win=6432 Len=0
 31.135581 10.255.10.11 -> 10.0.15.10   TCP 32771 > 1723 [FIN, ACK]
Seq=325 Ack=190 Win=5840 Len=0
 31.143228   10.0.15.10 -> 10.255.10.11 TCP 1723 > 32771 [ACK] Seq=190
Ack=326 Win=6432 Len=0

10.255.10.254 - ÛÌÀÚ ÐÒÏ×ÁÊÄÅÒÁ
10.0.15.10 - VPN ÓÅÒ×ÅÒ
10.255.10.11 - ÍÏÊ ÛÌÀÚ

îÁ ÛÌÀÚÅ ÓÔÏÉÔ ÑÄÒÏ 2.6.10. ñ ÐÒÏÂÏ×ÁÌ ÓÔÁ×ÉÔØ ÔÕÄÁ ×ÉÎÄÕ - ×Ó£
ÒÁÂÏÔÁÅÔ, ÅÓÌÉ ÓÄÅÌÁÔØ "Share internet connection". íÎÅ ËÁÖÅÔÓÑ, ÞÔÏ
ìÉÎÕËÓ ÎÅ ÈÕÖÅ, ÎÏ ...

úÁÒÁÎÅÅ ÓÐÁÓÉÂÏ ×ÓÅÍ ÏÔËÌÉËÎÕ×ÛÉÍÓÑ :)

-- 
Best Regards,
Antonio

ú.ù. üÔÏ ÎÅ ÏÆÆÔÏÐÉË? åÓÌÉ ÄÁ, ÔÏ ËÕÄÁ ÍÎÅ ÏÂÒÁÔÉÔØÓÑ?

-- 
gentoo-user-ru@g.o mailing list