VyOS軟路由系統基本設定

1. VyOS簡介

    VyOS是一個開源的網絡作業系統，可以安裝在實體硬體上，也可以安裝在你自己的虛拟機上，或者是一個雲平台上。它基于GNU/Linux，并加入了多個應用程式，如：Quagga, ISC DHCPD, Open×××, StrongS/WAN等，以及其他的管理界面。

    VyOS系統安裝最低要求512M記憶體和2G存儲即可。

2. 實驗需求

    最近工作中需要用到vyos軟路由，現将工作中搭建的過程總結如下。

    vyos開啟dhcp，開啟80和21端口轉發。

3. 環境準備

機器名稱	配置	系統	位址	備注
vyos	2C4G	vyos-1.1.7	eth0 172.16.0.99 eth1 192.168.10.1	兩塊網卡，eth0為外網，可以連接配接internet，eth1為内網
vm1		centos7.4	dhcp擷取	一塊網卡
vm2			192.168.10.150

4. 實驗拓撲

說明：

1.vyos開啟dhcp，80端口轉發和21端口轉發

2.vm1 dhcp擷取位址

3.vm2 配置靜态位址，開啟web服務和ftp服務

5. 基本設定

5.1 檢視設定

# 檢視全部設定

vyos@vyos:~$ show configuration

# 比對查詢

vyos@vyos:~$ show configuration commands | match eth0

# 檢視網卡設定

vyos@vyos:~$ show interfaces

5.2 配置網卡

# 進入配置模式

vyos@vyos:~$ configure

# 設定網卡描述

vyos@vyos# set interfaces ethernet eth0 description 'PUBLIC NETWORK'

vyos@vyos# set interfaces ethernet eth1 description 'PRIVATE NETWORK'

# 配置ip位址

vyos@vyos# set interfaces ethernet eth0 address 172.16.0.99/2

4

vyos@vyos# set protocols static route 0.0.0.0/0 next-hop '172.16.0.254'

vyos@vyos# set interfaces ethernet eth1 address 192.168.10.1/24

# 開啟ssh

vyos@vyos# set service ssh port '22'

# 儲存配置

vyos@vyos# commit

vyos@vyos# save

5.3 配置dns轉發

vyos@vyos# set service dns forwarding cache-size '0'

vyos@vyos# set service dns forwarding listen-on eth0

vyos@vyos# set service dns forwarding listen-on eth1

vyos@vyos# set service dns forwarding name-server '114.114.114.114'

vyos@vyos# set service dns forwarding name-server '8.8.8.8'

5.4 配置dhcp服務

vyos@vyos# set service dhcp-server disabled 'false'

vyos@vyos# set service dhcp-server shared-network-name LAN description 'LAN DHCP'

vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.10.0/24 default-router 192.168.10.1

vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.10.0/24 start 192.168.10.100 stop 192.168.10.200

vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.10.0/24 lease '86400'

vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.10.0/24 dns-server 192.168.10.1

5.5 配置内網出公網

vyos@vyos# set nat source rule 100 description 'TO INTERNET'

vyos@vyos# set nat source rule 100 source address 192.168.10.0/24

vyos@vyos# set nat source rule 100 outbound-interface eth0

vyos@vyos# set nat source rule 100 translation address 172.16.0.99

5.6 配置web轉發

vyos@vyos# set nat destination rule 1000 description "WEB SERVER"

vyos@vyos# set nat destination rule 1000 inbound-interface eth0

vyos@vyos# set nat destination rule 1000 destination address 172.16.0.99

vyos@vyos# set nat destination rule 1000 source address 0.0.0.0/0

vyos@vyos# set nat destination rule 1000 destination port 80

vyos@vyos# set nat destination rule 1000 protocol tcp

vyos@vyos# set nat destination rule 1000 translation address 192.168.10.150

vyos@vyos# set nat destination rule 1000 translation port 80

5.7 配置ftp轉發

vyos@vyos# set nat destination rule 1001 description "FTP SERVER"

vyos@vyos# set nat destination rule 1001 inbound-interface eth0

vyos@vyos# set nat destination rule 1001 destination address 172.16.0.99

vyos@vyos# set nat destination rule 1001 protocol tcp

vyos@vyos# set nat destination rule 1001 source address 0.0.0.0/0

vyos@vyos# set nat destination rule 1001 destination port 21

vyos@vyos# set nat destination rule 1001 translation address 192.168.10.150

vyos@vyos# set nat destination rule 1001 translation port 21

5.8 測試檢查

vm1設定網卡dhcp，重新開機網卡。發現可以擷取到ip192.168.10.100，并可以連接配接外網

vm2設定網卡靜态ip位址，重新開機網卡。并開啟web和ftp服務

測試成功轉發

參考資料