{"id":722,"date":"2016-10-30T17:24:44","date_gmt":"2016-10-30T09:24:44","guid":{"rendered":"https:\/\/ntzyz.io\/?p=722"},"modified":"2017-09-18T19:59:57","modified_gmt":"2017-09-18T11:59:57","slug":"simple-policy-routing-on-openwrt","status":"publish","type":"post","link":"https:\/\/archive.ntzyz.io\/2016\/10\/30\/simple-policy-routing-on-openwrt\/","title":{"rendered":"[OpenWrt] \u7b80\u5355\u7684\u7b56\u7565\u8def\u7531"},"content":{"rendered":"<style> p.indent { text-indent: 2em; } <\/style>\n<p class=\"indent\">\u4e0a\u5b66\u671f\u671f\u672b\u79fb\u52a8\u5bbd\u5e26\u8d28\u91cf\u4e0d\u65ad\u52a3\u5316\uff0c\u6211\u4eec\u5bbf\u820d\u88ab\u8feb\u8f6c\u5411\u7535\u4fe1\u5bbd\u5e26\u3002\u4e3a\u4e86\u89e3\u51b3\u90a3\u4e2a\u8be5\u6b7b\u7684\u9632\u5171\u4eab\u673a\u5236\uff0c\u6211\u81ea\u8d39\u8d2d\u4e70\u4e86\u4e00\u4e2a\u5751\u7239\u7684\u7834\u89e3\u8def\u7531\u5668\uff0c\u672c\u8d28\u5c31\u662f\u4e00\u4e2a\u66ff\u6362\u4e86 PPP \u7684 OpenWrt \u8def\u7531\u5668\u3002\u9009\u62e9\u8d2d\u4e70\u800c\u4e0d\u662f\u81ea\u5df1\u52a8\u624b\u7834\u89e3\u7684\u4e3b\u8981\u539f\u56e0\u662f\u4e0d\u60f3\u5728\u8fd9\u4e0a\u9762\u6d88\u8017\u592a\u591a\u7cbe\u529b\uff0c\u65e2\u7136\u6709\u73b0\u6210\u7684\u89e3\u51b3\u65b9\u6848\uff0c\u90a3\u5c31\u638f\u94b1\u89e3\u51b3\u4e86\uff08<\/p>\n<p class=\"indent\">\u90a3\u4e2a\u7834\u89e3\u7684\u8def\u7531\u5668\u5f88\u6e23\uff0c\u662f\u4e2a\u770b\u8d77\u6765\u5c31\u4e0d\u50cf\u90a3\u79cd\u80fd\u62d6\u5bbf\u820d\u91cc\u6240\u6709\u7535\u5b50\u4ea7\u54c1\u7684\u7834\u8def\u7531\uff0c\u6240\u4ee5\u6211\u53ea\u5c06\u5176\u4f5c\u4e3a\u62e8\u53f7\u8def\u7531\uff0c\u800c\u4e3b\u8981\u7684 NAT \u5de5\u4f5c\u548c Access Point \u4ecd\u7136\u4ea4\u7ed9 WNDR 4300 \u6765\u5b8c\u6210\u3002\u7535\u4fe1\u7684\u8def\u7531\u5668 LAN IP: 192.168.43.1 \u5e76\u5f00\u542f DHCP\uff0c\u7136\u540e WNDR 4300 \u76f4\u63a5\u5c06 WAN \u63a5\u81f3\u4efb\u610f\u4e00\u4e2a LAN \u53e3\uff0c\u5b8c\u6210\u540e\u987a\u624b\u5173\u6389\u4e86\u7834\u89e3\u8def\u7531\u5668\u7684 WiFi<\/p>\n<p><!--more--><\/p>\n<p class=\"indent\">\u5f53\u7136\u5927\u5bb6\u90fd\u77e5\u9053\u7535\u4fe1\u7684\u56fd\u9645\u51fa\u53e3\u6709\u591a\u60e8\uff0c\u4e0a\u4e2a Google \u67e5\u4e1c\u897f\u90fd\u8ba9\u4eba\u60f3\u7838\u7535\u8111\uff08\u4e0d\uff09\uff0c\u540c\u65f6\u5bbf\u820d\u79fb\u52a8\u7684\u63a5\u53e3\u4e0d\u7528\u767d\u4e0d\u7528\u3002\u4e8e\u662f\u51b3\u5b9a\u5c1d\u8bd5\u4e00\u4e0b\u7ec4\u4e24\u4e2a\u7f51\u5173\uff0c\u8ba9\u90e8\u5206\u6d77(fan)\u5916(qiang)\u6d41\u91cf\u8d70\u6c5f\u82cf\u79fb\u52a8\uff0c\u5176\u4f59\u7684\u8d70\u6c5f\u82cf\u7535\u4fe1\uff0c\u6765\u63d0\u5347\u6574\u4f53\u7684\u7f51\u7edc\u4f53\u9a8c<\/p>\n<p class=\"indent\">\u9996\u5148\u662f\u8981\u4fee\u6539 WNDR 4300 \u4e0a\u7684\u4ea4\u6362\u673a\u914d\u7f6e\uff0c\u8ba9\u4ed6\u5c06\u4e00\u4e2a LAN \u53e3\u4ee5 WAN \u7684\u5f62\u5f0f\u5de5\u4f5c\uff1a\u5728 OpenWrt \u7684\u4ea4\u6362\u673a\u914d\u7f6e\u754c\u9762\uff0c\u6dfb\u52a0\u4e00\u4e2a VLAN\uff0cID \u4efb\u610f\uff0c\u5c06 CPU \u548c\u51c6\u5907\u5f53\u4f5c WAN \u7684\u90a3\u4e2a\u53e3\u5206\u522b\u8bbe\u7f6e\u4e3a tagged \u548c untagged\uff0c\u5269\u4e0b\u7684\u5176\u4ed6\u7aef\u53e3\u8bbe\u7f6e\u6210\u5173\u5c31\u597d\u4e86\u3002<\/p>\n<p><a href=\"https:\/\/ntzyz.io\/wp-content\/uploads\/switches.png\"><img loading=\"lazy\" width=\"1009\" height=\"399\" src=\"https:\/\/ntzyz.io\/wp-content\/uploads\/switches.png\" alt=\"switches\" class=\"aligncenter size-full wp-image-723\" \/><\/a><\/p>\n<p class=\"indent\">\u7136\u540e\u53bb\u7f51\u7edc -> \u63a5\u53e3\uff0c\u6dfb\u52a0\u4e00\u4e2a\u7c7b\u578b\u4e3a PPPoE \u7684\u63a5\u53e3\uff0c\u7269\u7406\u8bbe\u7f6e\u63a5\u53e3\u4e3a\u521a\u521a\u521b\u5efa\u7684 VLAN \u63a5\u53e3\u3002\u56e0\u4e3a\u8def\u7531\u5668\u7684\u4e3b\u8981\u63a5\u53e3\u4ecd\u7136\u662f\u4e4b\u524d\u7684 DHCP \u5ba2\u6237\u7aef\uff0c\u6240\u4ee5\u6211\u4eec\u8981\u53bb\u6389\u9ad8\u7ea7\u8bbe\u7f6e\u4e2d\u7684\u4f7f\u7528\u9ed8\u8ba4\u7f51\u5173\u3002\u586b\u5199\u597d PAP\/CHAP \u7528\u6237\u540d\/\u5bc6\u7801\u540e\uff0c\u63d0\u4ea4\u53d8\u66f4\u3002\u4e0d\u51fa\u610f\u5916\u5c31\u6210\u529f\u7684\u62e8\u53f7\u5b8c\u6bd5\uff0c\u4e0b\u9762\u9700\u8981\u7684\u5c31\u662f\u5982\u4f55\u7b56\u7565\u8def\u7531\u4e86\u3002<\/p>\n<p><a href=\"https:\/\/ntzyz.io\/wp-content\/uploads\/int.png\"><img loading=\"lazy\" width=\"999\" height=\"555\" src=\"https:\/\/ntzyz.io\/wp-content\/uploads\/int.png\" alt=\"int\"  class=\"aligncenter size-full wp-image-724\" \/><\/a><\/p>\n<p class=\"indent\">\u4f7f\u7528 SSH \u8fde\u63a5\u5230\u8def\u7531\u5668\uff0c\u66f4\u65b0\u8f6f\u4ef6\u5305\u5e76\u5b89\u88c5 iproute2\u3002\u5b8c\u6210\u540e\u8f93\u5165 ip route\uff0c\u53ef\u4ee5\u770b\u5230\u7c7b\u4f3c\u8fd9\u6837\u7684\u4e00\u884c\u7ed3\u679c\uff1a<\/p>\n<p><code>10.49.196.1 dev pppoe-cmcc  proto kernel  scope link  src 10.49.199.127<\/code><\/p>\n<p class=\"indent\">\u5f88\u5bb9\u6613\u60f3\u5230 10.49.196.1 \u5c31\u662f\u79fb\u52a8 PPPoE \u7684\u7f51\u5173\u4e86\uff0c\u6211\u4eec\u53ea\u8981\u5c06\u90e8\u5206\u7f51\u6bb5\u7684\u9ed8\u8ba4\u8def\u7531\u4fee\u6539\u5230\u8fd9\u4e2a\u7f51\u5173\u4e0a\uff0c\u5c31\u53ef\u4ee5\u5b9e\u73b0\u9ad8\u901f\u8bbf\u95ee\u56fd\u9645\u4e92\u8054\u7f51\u4e86\uff08<\/p>\n<pre class=\"lang:bash\">\r\n#!\/bin\/sh\r\n\r\nINT=pppoe-cmcc\r\nTABLE=cmcc\r\n\r\nDEST=`ip route show dev $INT | head -n 1 | awk '{print $1}'`\r\n\r\n# ConoHa JP\r\nroute add -net 133.130.96.0\/19 gw $DEST\r\nroute add -net 133.130.88.0\/21 gw $DEST\r\nroute add -net 133.130.126.0\/24 gw $DEST\r\n\r\n# Linode JP\r\nroute add -net 106.185.24.0\/21 gw $DEST\r\nroute add -net 106.186.16.0\/20 gw $DEST\r\n\r\n# CCZU CERNET\r\nroute add -net 219.230.144.0\/20 gw $DEST\r\n\r\n# JS Cernet\r\nroute add -net 211.65.74.0\/24 gw $DEST\r\n\r\n# CCZU Spoc\r\nroute add -net 202.195.100.0\/24 gw $DEST\r\n<\/pre>\n<p class=\"indent\">\u55ef\uff0c\u6700\u57fa\u672c\u7684\u76ee\u7684\u5df2\u7ecf\u8fbe\u5230\u4e86\u3002\u65e0\u538b\u529b\u64ad\u653e 1080P \u6e05\u6670\u5ea6\u7684\u6cb9\u7ba1\u89c6\u9891\u6700\u68d2\u4e86\uff08<\/p>\n<p class=\"indent\">\u4e0d\u8fc7\u4e0d\u4e45\u53c8\u6709\u65b0\u7684\u95ee\u9898\u4e86\uff0c\u6c5f\u82cf\u7535\u4fe1\u7684\u6821\u56ed\u5bbd\u5e26\u91c7\u7528\u7684\u662f\u52a8\u6001\u5bc6\u7801\uff0cPPPoE \u65ad\u5f00\u540e\u56e0\u4e3a\u5bc6\u7801\u5931\u6548\uff0c\u65e0\u6cd5\u81ea\u52a8\u6062\u590d\u63a5\u53e3\u3002\u8fd9\u5bf9\u4e8e\u5bdd\u5ba4\u4e00\u4e2a\u73a9\u68a6\u5e7b\u897f\u6e38\u7684\u540c\u5b66\u6765\u8bf4\u662f\u975e\u5e38\u6050\u6016\u7684\u2014\u2014\u6bcf\u6b21\u6389\u7ebf\u90fd\u8981\u82b1\u5927\u91cf\u7684\u65f6\u95f4\u91cd\u65b0\u767b\u9646\u6240\u6709\u7684\u8d26\u53f7\u3002<\/p>\n<p class=\"indent\">\u4e8e\u662f\uff0c\u7ecf\u8fc7\u8ba8\u8bba\u51b3\u5b9a\uff0c\u5c06 192.168.1.240\/28 \u8fd9\u4e2a\u7f51\u6bb5\u732e\u796d\u51fa\u6765\uff0c\u505a\u7eaf\u79fb\u52a8\u7684\u63a5\u53e3\uff0c\u4ee5\u7528\u6765\u6302\u673a\u4e0b\u8f7d\u6216\u8005\u662f\u957f\u65f6\u95f4\u4e0d\u6389\u7ebf\u7684\u7f51\u7edc\u3002\u7ecf\u8fc7\u7f16\u8f91\u7684\u65b0\u811a\u672c\u5982\u4e0b\uff1a<\/p>\n<pre class=\"lang:bash\">\r\n#!\/bin\/sh\r\n\r\nINT=pppoe-cmcc\r\nTABLE=cmcc\r\n\r\nDEST=`ip route show dev $INT | head -n 1 | awk '{print $1}'`\r\nSRC=`ip route show dev $INT | head -n 1 | awk '{print $7}'`\r\n\r\nif [ \"$1\" == \"pppoe-cmcc\" ]; then\r\n    # Remove all old rules\r\n    # while ip rule delete from 0\/0 to 0\/0 table cmcc 2>\/dev\/null; do true; done\r\n\r\n    # Add rules to let 192.168.1.240\/28's traffic to CMCC gateway.\r\n    ip rule add from 192.168.1.240\/28 table cmcc priority 32765\r\n    ip rule flush cache\r\n    ip route add default via $SRC dev $INT table cmcc\r\n\r\n    # ConoHa JP\r\n    route add -net 133.130.96.0\/19 gw $DEST\r\n    route add -net 133.130.88.0\/21 gw $DEST\r\n    route add -net 133.130.126.0\/24 gw $DEST\r\n\r\n    # Linode JP\r\n    route add -net 106.185.24.0\/21 gw $DEST\r\n    route add -net 106.186.16.0\/20 gw $DEST\r\n\r\n    # CCZU CERNET\r\n    route add -net 219.230.144.0\/20 gw $DEST\r\n\r\n    # JS Cernet\r\n    route add -net 211.65.74.0\/24 gw $DEST\r\n\r\n    # CCZU Spoc\r\n    route add -net 202.195.100.0\/24 gw $DEST\r\nfi\r\n<\/pre>\n<p class=\"indent\">\u5c06\u8fd9\u4e2a\u811a\u672c\u653e\u7f6e\u5230 \/etc\/ppp\/ip-up.d\/cmcc \u4e2d\uff0c\u5e76\u6dfb\u52a0\u53ef\u6267\u884c\u6743\u9650\uff0c\u6211\u4eec\u7684\u7b80\u5355\u7684\u7b56\u7565\u8def\u7531\u811a\u672c\u5c31\u80fd\u5728\u79fb\u52a8\u62e8\u53f7\u6210\u529f\u540e\u81ea\u52a8\u5e94\u7528\u5230\u7cfb\u7edf\u8def\u7531\u8868\u4e0a\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e0a\u5b66\u671f\u671f\u672b\u79fb\u52a8\u5bbd\u5e26\u8d28\u91cf\u4e0d\u65ad\u52a3\u5316\uff0c\u6211\u4eec\u5bbf\u820d\u88ab\u8feb\u8f6c\u5411\u7535\u4fe1\u5bbd\u5e26\u3002\u4e3a\u4e86\u89e3\u51b3\u90a3\u4e2a\u8be5\u6b7b\u7684\u9632\u5171\u4eab\u673a\u5236\uff0c\u6211\u81ea\u8d39\u8d2d\u4e70\u4e86\u4e00\u4e2a\u5751\u7239\u7684 &hellip; <a href=\"https:\/\/archive.ntzyz.io\/2016\/10\/30\/simple-policy-routing-on-openwrt\/\" class=\"more-link\">\u7ee7\u7eed\u9605\u8bfb<span class=\"screen-reader-text\">[OpenWrt] \u7b80\u5355\u7684\u7b56\u7565\u8def\u7531<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[38],"tags":[10],"_links":{"self":[{"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/posts\/722"}],"collection":[{"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/comments?post=722"}],"version-history":[{"count":6,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/posts\/722\/revisions"}],"predecessor-version":[{"id":917,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/posts\/722\/revisions\/917"}],"wp:attachment":[{"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/media?parent=722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/categories?post=722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/archive.ntzyz.io\/wp-json\/wp\/v2\/tags?post=722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}