#nat配置
#本次eth0模拟为外网出口,eth1为内网接口
set nat source rule 100 description 'TO INTERNET'
set nat source rule 100 source address 10.1.1.0/24
set nat source rule 100 outbound-interface name eth0
set nat source rule 100 translation address 192.168.1.252
#通告路由
set protocols bgp address-family ipv4-unicast network 10.1.1.0/24
其它bgp节点已学习到10.1.1.0网段
[root@node1 vyos]# ip route
default via 192.168.1.1 dev eth0
10.1.1.0/24 via 192.168.1.252 dev eth0 proto bird
10.244.3.64/26 via 192.168.1.203 dev eth0 proto 80 onlink
10.244.104.0/26 via 192.168.1.201 dev eth0 proto 80 onlink
10.244.135.0/26 via 192.168.1.202 dev eth0 proto 80 onlink
blackhole 10.244.166.128/26 proto 80
10.244.166.129 dev cali876ff7c404c scope link
10.244.166.130 dev cali8887c615354 scope link
10.244.166.131 dev calib745e0583d4 scope link
169.254.0.0/16 dev eth0 scope link metric 1002
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.200
网络连通性测试
[root@node1 vyos]# ping 10.1.1.100
PING 10.1.1.100 (10.1.1.100) 56(84) bytes of data.
64 bytes from 10.1.1.100: icmp_seq=1 ttl=63 time=0.485 ms
64 bytes from 10.1.1.100: icmp_seq=2 ttl=63 time=0.434 ms
^C
--- 10.1.1.100 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.434/0.459/0.485/0.033 ms
[root@node1 vyos]#
[root@node1 vyos]#
[root@node1 vyos]# ssh 10.1.1.100
root@10.1.1.100's password: