如何设置使用2张有线和1张wired网卡共享的wired热点？

Question

我在我的ubuntu10.04服务器上安装了3张网卡，我想在eth1上为有线用户配置互联网共享和文件共享，为无线用户配置wlan0。

静态ip：

eth0：192.168.1.1

eth1：10.0.0.15

wlan0：10.0.0.20

/etc/network/interfaces

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 192.168.1.15
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.1


#The secondary network interfaces
auto eth1
iface eth1 inet static
address 10.0.0.15
netmask 255.0.0.0
network 10.0.0.0
broadcast 10.255.255.255

auto wlan0
iface wlan0 inet static
address 10.0.0.20
netmask 255.0.0.0
network 10.0.0.0
broadcast 10.255.255.255

我已经为互联网配置了鱿鱼和丹麦卫士。

我在hostapd /etc/hostapd/hostapd.conf中配置了WPA身份验证选项。

01 interface=wlan0
02 driver=nl80211
03 ssid=dontMessWithVincentValentine
04 hw_mode=g
05 channel=6
06 macaddr_acl=0
07 auth_algs=1
08 ignore_broadcast_ssid=0
09 wpa=3
10 wpa_passphrase=KeePGuessinG
11 wpa_key_mgmt=WPA-PSK
12 wpa_pairwise=TKIP
13 rsn_pairwise=CCMP

还配置了DHCP服务器(/etc/dhcp3/dhcpd.conf)

ddns-update-style none;
ignore client-updates;
authoritative;
option local-wpad code 252 = text;
subnet 10.0.0.0 netmask 255.255.255.0 {
# --- default gateway
option routers 10.0.0.15;
# --- Netmask
option subnet-mask 255.255.255.0;
# --- Broadcast Address
option broadcast-address 10.0.0.255;
# --- Domain name servers, tells the clients which DNS servers to use.
option domain-name-servers 10.0.0.15, 127.0.0.1, 192.168.1.1;
option time-offset 0;
range 10.0.0.21 10.0.0.30;
default-lease-time 1209600;
max-lease-time 1814400;
}

/etc/default/dhcp3-server

INTERFACES="eth1 wlan0"

我已经为IPv4和IPv6 (/etc/sysctl.conf)启用了数据包转发

Net.ipv4.ip_forward = 1
Net.ipv6.conf.all.forwarding = 1

/etc/rc.local

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

客户端pc可以在eth1上接收互联网共享，也可以接收dhcp地址和平另一个网络。

从wlan到客户端pc，可以接收dhcp地址，但是不能通过ping到10.0.0.20来接收dhcp地址或网络中的任何其他pc，我的防火墙也不启用。

无线局域网用户不能进行ping或通信的问题是什么?要将其配置为防火墙+路由器，通过它可以将internet共享给有线连接用户和无线用户。

Answer 1

DHCP服务器告诉所有客户端使用eth1 IP地址作为网关，但Wi客户端无法访问该地址，因此不能将其路由到其他网络。Wi客户端甚至不能平wlan0地址，因为eth1和wlan0都在同一个子网接口和有线接口优先于无线接口上，因此eth1发出ping回复，而nerver到达无线客户端。

您必须分离eth1和wlan0子网，并相应地配置DHCP。

/etc/network/interfaces：

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
 address 192.168.1.15
 netmask 255.255.255.0
 gateway 192.168.1.1

#The secondary network interfaces
auto eth1
iface eth1 inet static
 address 10.0.0.15
 netmask 255.255.255.0

auto wlan0
iface wlan0 inet static
 address 10.0.1.15
 netmask 255.255.255.0

/etc/dhcp3/dhcpd.conf：

ddns-update-style none;
ignore client-updates;
authoritative;
default-lease-time 1209600;
max-lease-time 1814400;
option local-wpad code 252 = text;
option domain-name-servers 192.168.1.15;
option time-offset 0;

subnet 10.0.0.0 netmask 255.255.255.0 {
  option routers 10.0.0.15;
  range 10.0.0.21 10.0.0.30;
}

subnet 10.0.1.0 netmask 255.255.255.0 {
  option routers 10.0.1.15;
  range 10.0.1.21 10.0.1.30;
}