[root@localhost network-scripts]# rpm -q rp-pppoe
package rp-pppoe is not installed
-----------------
[root@localhost network-scripts]# yum list |grep pppoe
rp-pppoe.x86_64 3.10-16.el6 base
-----------------
[root@localhost network-scripts]# yum install rp-pppoe -y
-----------------
[root@localhost network-scripts]# rpm -q rp-pppoe
rp-pppoe-3.10-16.el6.x86_64
-----------------设置支持ip转发
vi /etc/sysctl.conf
net.ipv4.ip_forward = 1
-----------------修改服务器配置----------------
vi /etc/ppp/pppoe-server-options
# PPP options for the PPPoE server
# LIC: GPL
#require-pap
require-chap
login
lcp-echo-interval 10
lcp-echo-failure 2
logfile /var/log/pppoe.log
ms-dns 8.8.8.8
ms-dns 114.114.114.114
--------------------添加用户名密码，修改/etc/ppp/chap-secrets文件，
chap1 * "chap1" *
chap2 * "chap2" *
chap3 * "chap3" *
chap4 * "chap4" *
chap5 * "chap5" *
chap6 * "chap6" *
chap7 * "chap7" *
chap8 * "chap8" *
chap9 * "chap9" *
chap10 * "chap10" *
chap11 * "chap11" *
chap12 * "chap12" *
chap13 * "chap13" *
chap14 * "chap14" *
chap15 * "chap15" *
chap16 * "chap16" *
chap17 * "chap17" *
chap18 * "chap18" *
chap19 * "chap19" *
chap20 * "chap20" *
chap21 * "chap21" *
chap22 * "chap22" *
chap23 * "chap23" *
chap24 * "chap24" *
chap25 * "chap25" *
chap26 * "chap26" *
chap27 * "chap27" *
chap28 * "chap28" *
chap29 * "chap29" *
chap30 * "chap30" *
--------------------给eth0接口创建虚接口eth0:2并up
ifconfig eth0:1 20.20.20.2 netmask 255.255.255.0
ifconfig eth0:1 up
--------------------给eth0接口创建虚接口eth0:2重启网络生效
cd /etc/sysconfig/network-script/
cp ifcfg-eth0 ifcfg-eth0:2
vi ifcfg-eth0:2
DEVICE=eth0:1
HWADDR=00:0C:29:AD:F8:B7
TYPE=Ethernet
UUID=d60f7bad-0f18-420a-8e19-3e361f8ffed4
ONBOOT=yes
NM_CONTROLLED=yes
BOOTPROTO=static
IPADDR=20.20.20.2
NETMASK=255.255.255.0
service network restart
--------------------添加防火墙规则，做nat转换 iptables -t nat -A POSTROUTING -s 20.20.20.0/24 -j MASQUERADE (iptables -t nat -A POSTROUTING -s 20.20.20.0/24 -o eth1 -j SNAT --to-source 192.172.1.172) iptables -A FORWARD -p tcp --syn -s 20.20.20.0/24 -j TCPMSS --set-mss 1256
service iptables save 保存防火墙规则到配置文件/etc/sysconfig/iptables echo 1 > /proc/sys/net/ipv4/ip_forward sysctl -w net.ipv4.ip_forward=1
第一条是添加nat，转换来自20.20.20.0/24网段的ip (MASQUERADE是针对连接公网的接口是自动获取地址) 或者：iptables -t nat -A POSTROUTING -s 20.20.20.0/24 -o eth1 -j SNAT --to-source 192.172.1.172 第二条是修改mtu 第四条打开转发 第五条是修改转发文件
--------------------如下FORWARD链中REJECT的规则，阻止了数据报文的转发，进行删除iptables -D FORWARD 1，然后service iptables save保存到配置
iptables -nvL FORWARD
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
389 23343 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
0 0 TCPMSS tcp -- * * 20.20.20.0/24 0.0.0.0/0 tcp flags:0x17/0x02 TCPMSS set 1256
--------------------启动pppoe-server
pppoe-server -I eth0:1 -L 20.20.20.1 -R 20.20.20.100-200
--------------------查看pppoe-server的进程
[root@localhost network-scripts]# ps aux |grep pppoe
root 3200 0.0 0.0 4104 300 ? S 04:04 0:00 pppoe-server -I eth0:1 -L 20.20.20.1 -R 20.20.20.100-200
root 3201 0.0 0.1 49488 1860 ? Ss 04:04 0:00 pppd pty /usr/sbin/pppoe -n -I eth0:2 -e 1:a0:9d:86:16:2c:99 -S '' file /etc/ppp/pppoe-server-options 20.20.20.1:20.20.20.100 nodetach noaccomp nobsdcomp nodeflate nopcomp novj novjccomp default-asyncmap
nobody 3204 0.0 0.0 6184 708 ? S 04:04 0:00 /usr/sbin/pppoe -n -I eth0:2 -e 1:a0:9d:86:16:2c:99 -S
root 3215 0.0 0.1 49488 1848 ? Ss 04:04 0:00 pppd pty /usr/sbin/pppoe -n -I eth0:2 -e 2:a0:9d:86:fc:89:13 -S '' file /etc/ppp/pppoe-server-options 20.20.20.1:20.20.20.101 nodetach noaccomp nobsdcomp nodeflate nopcomp novj novjccomp default-asyncmap
nobody 3216 0.0 0.0 6184 704 ? S 04:04 0:00 /usr/sbin/pppoe -n -I eth0:2 -e 2:a0:9d:86:fc:89:13 -S
root 3229 0.0 0.1 49488 1848 ? Ss 04:06 0:00 pppd pty /usr/sbin/pppoe -n -I eth0:2 -e 3:a0:9d:86:fc:89:73 -S '' file /etc/ppp/pppoe-server-options 20.20.20.1:20.20.20.102 nodetach noaccomp nobsdcomp nodeflate nopcomp novj novjccomp default-asyncmap
nobody 3230 0.0 0.0 6184 708 ? S 04:06 0:00 /usr/sbin/pppoe -n -I eth0:2 -e 3:a0:9d:86:fc:89:73 -S
root 3240 0.0 0.0 103248 872 pts/0 S+ 04:06 0:00 grep pppoe
[root@localhost network-scripts]# service pppoe-server status
pppoe-server (pid 1573) 正在运行...
[root@localhost network-scripts]#
--------------------设置开机启动
添加如下命令到脚本/etc/rc.d/rc.local中
pppoe-server -I eth0:2 -L 20.20.20.1 -R 20.20.20.100-200
-------------------------------------
对于虚拟机的虚接口桥接到真实主机的无线网卡时，常出现虚接口消失的情况，可以使用python写个检测程序
#!/usr/local/bin/python3
import os,re,time
while True:
val = os.popen("ifconfig").read()
if ["eth1:1"] == re.findall(r"eth1:1",val):
print("eth1:1 is exist")
time.sleep(3)
else:
os.popen('ifconfig eth1:1 40.10.10.1 netmask 255.255.255.0')
time.sleep(3)
os.popen('ifconfig eth1:1 up')
time.sleep(3)
print("eth1:1 has been created")
if ["eth1:3"] == re.findall(r"eth1:3",val):
print("eth1:3 is exist")
time.sleep(3)
else:
os.popen('ifconfig eth1:3 100.100.100.1 netmask 255.255.255.0')
time.sleep(3)
os.popen('ifconfig eth1:3 up')
time.sleep(3)
print("eth1:3 has been created")
print("eth1:1 and eth1:3 are all up")