服务器1网卡接互联网,2网卡接交换机,工作站电脑也连接交换机
工作站配置
局域网 IP 192.168.16.20
掩码255.255.255.0
网关192.168.16.4
服务器2个网卡配置
1网卡设备名em0
公网IP 192.168.18.88
掩码 255.255.255.0
网关 192.168.18.1
dns 202.102.224.68
2网卡设备名em1
局域网 IP 192.168.16.4
掩码255.255.255.0
配置/etc/rc.conf如下:
ifconfig_em1="inet 192.168.16.4 netmask 255.255.255.0"
ifconfig_em0="inet 192.168.18.88 netmask 255.255.255.0"
gateway_enable="YES"
defaultrouter="192.168.18.1"
pf_enable="YES"
pf_rules="/etc/pf.conf"
sshd_enable="YES"
dhcpd_enable="YES"
hostname="god.com"
配置/etc/pf.conf如下:
wan="em0"
lan="em1"
nat pass on $wan from $lan:network to any -> $wan
pass in all
pass out all
配置/etc/sysctl.conf如下:
net.inet.ip.forwarding=1
net.inet.ip.sourceroute=0
net.inet.ip.accept_sourceroute=0
net.inet.tcp.drop_synfin=1
可以了