centos6 桥接多vlan NAT

基础环境

外网网卡：eth0

内网网卡：eth1

1、br100，桥接vlan100，ip：172.16.100.0/24

2、br200，桥接vlan200，ip：172.16.200.0/24

配置：

1、echo 1 > /etc/sys/net/ipv4/ip_forward

2、修改/etc/sysctl.conf：添加net.ipv4.ip_forward = 1（默认为0），执行sysctl -p查看

3、修改iptables：

*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -s 172.16.100.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 172.16.200.0/24 -o eth0 -j MASQUERADE
COMMIT
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -i br100 -j ACCEPT
-A FORWARD -i br200 -j ACCEPT
-A FORWARD -d 172.16.100.0/24 -j ACCEPT
-A FORWARD -d 172.16.200.0/24 -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT