{"id":493,"date":"2023-02-06T21:35:42","date_gmt":"2023-02-06T21:35:42","guid":{"rendered":"http:\/\/tty.tartux.net\/?p=493"},"modified":"2023-02-06T21:45:03","modified_gmt":"2023-02-06T21:45:03","slug":"routage-avec-une-debian","status":"publish","type":"post","link":"https:\/\/tty.tartux.net\/?p=493","title":{"rendered":"Routage avec une debian"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Je veux me cr\u00e9er un petit r\u00e9seau pour faire mes geekeries. Je choisis 192.168.10.0\/26. 62 adresses, \u00e7a devrait suffire.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Je cr\u00e9\u00e9 ma passerelle debian avec ses deux cartes r\u00e9seau :<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IP1: 192.168.1.180 c\u00f4t\u00e9 box orange (192.168.1.1\/24) -&gt; eth0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IP2: 192.168.10.193 c\u00f4t\u00e9 mon nouveau r\u00e9seau. -&gt; eth1<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">D'abord, je configure le transit des flux dans \/etc\/sysctl.conf :<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">net.ipv4.ip_forward=1<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"> Avec iptables, on ajoute du nat pour prot\u00e9ger mon nouveau r\u00e9seau, ainsi tous les paquets sembleront venir de la passerelle.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"># iptables -t nat -A POSTROUTING eth0 -j MASQUERADE<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Puis on ajoute la communication dans les deux sens :<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><p># iptables -A FORWARD -i eth1 -o eth0 -m state RELATED, ESTABLISHED -j ACCEPT<\/p>\n<p># iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT<\/p><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">On sauvegarde les r\u00e8gles :<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"># iptables-save &gt; \/etc\/iptables_rules.save<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Enfin, pour appliquer les r\u00e8gles au d\u00e9marrage, dans \/etc\/network\/interfaces, on ajoute :<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">post-up iptables-restore &lt; \/etc\/iptables_rules.save<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Au cas o\u00f9, pour lire la r\u00e8gle nat : iptables -L -t nat<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pour acc\u00e9der au nouveau r\u00e9seau depuis une machine du r\u00e9seau box, il faut lui ajouter une route statique :<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"># route add -net 192.168.10.192 netmask 255.255.255.192 gw 192.168.1.180<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Magique.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Je veux me cr\u00e9er un petit r\u00e9seau pour faire mes geekeries. Je choisis 192.168.10.0\/26. 62 adresses, \u00e7a devrait suffire. Je cr\u00e9\u00e9 ma passerelle debian avec ses deux cartes r\u00e9seau : IP1: 192.168.1.180 c\u00f4t\u00e9 box orange (192.168.1.1\/24) -&gt; eth0 IP2: 192.168.10.193 c\u00f4t\u00e9 mon nouveau r\u00e9seau. -&gt; eth1 D'abord, je configure le transit des flux dans \/etc\/sysctl.conf [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,145],"tags":[80,149,150],"class_list":["post-493","post","type-post","status-publish","format-standard","hentry","category-config","category-reseau","tag-iptables","tag-passerelle","tag-routage"],"_links":{"self":[{"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/posts\/493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=493"}],"version-history":[{"count":2,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/posts\/493\/revisions"}],"predecessor-version":[{"id":496,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=\/wp\/v2\/posts\/493\/revisions\/496"}],"wp:attachment":[{"href":"https:\/\/tty.tartux.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tty.tartux.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}