Linux隧道isatap（sit模式）

可使用isatap模式配置isatap隧道（isatap隧道模式），也可使用sit模式实现。如下环境：

      |----------|                                |----------|
      |          | ens33                    ens33 |          |
      |  Client  |--------------------------------|  Server  |
      |          | 192.168.20.5      192.168.20.1 |          |
      |----------|                                |----------|

Server主机配置

IP隧道配置使用sit模式，指定本地和远端IPv4地址。为接口配置isatap格式的IPv6地址。

# ip address add 192.168.20.1/24 dev ens33
#
# ip tunnel add isatap0 mode sit remote 192.168.20.5 local 192.168.20.1
# ip link set isatap0 up
# 
# ip addr add 3ffe:ffff:1234:5678::5efe:192.168.20.1/64 dev isatap0

查看隧道配置

# ip link show
18: isatap0@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/sit 192.168.20.1 peer 192.168.20.5
#
# ip address show dev isatap0
18: isatap0@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN group default qlen 1000
    link/sit 192.168.20.1 peer 192.168.20.5
    inet6 3ffe:ffff:1234:5678:0:5efe:c0a8:1401/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::c0a8:1401/64 scope link 
       valid_lft forever preferred_lft forever

Client主机配置

与上节隧道配置相同，区别在于isatap0接口的地址。

# ip address add 192.168.20.5/24 dev ens33
#
# ip tunnel add isatap0 mode sit local 192.168.20.5 remote 192.168.20.1     
# ip link set isatap0 up
#
# ip addr add 3ffe:ffff:1234:5678::5efe:192.168.20.5/64 dev isatap0

查看隧道地址配置

# ip link show
13: isatap0@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/sit 192.168.20.5 peer 192.168.20.1
#
# ip address show
13: isatap0@NONE: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1480 qdisc noqueue state UNKNOWN group default qlen 1000
    link/sit 192.168.20.5 peer 192.168.20.1
    inet6 3ffe:ffff:1234:5678:0:5efe:c0a8:1405/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::c0a8:1405/64 scope link 
       valid_lft forever preferred_lft forever

测试

在Client主机192.168.20.5上验证隧道联通性：

# ping 3ffe:ffff:1234:5678:0:5efe:c0a8:1401 -c 1
PING 3ffe:ffff:1234:5678:0:5efe:c0a8:1401(3ffe:ffff:1234:5678:0:5efe:c0a8:1401) 56 data bytes
64 bytes from 3ffe:ffff:1234:5678:0:5efe:c0a8:1401: icmp_seq=1 ttl=64 time=2.46 ms

--- 3ffe:ffff:1234:5678:0:5efe:c0a8:1401 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 2.458/2.458/2.458/0.000 ms 

如下为抓取到的echo请求报文：