pnet9 become NAT cloud like pro

tommiy

Sorry in english. Turn pnet9 to be a NAT cloud for external NAT access and supply DHCP to internal management interfaces like in pro.

Edit /etc/network/interfaces for pnet9 change to

iface eth9 inet manual

auto pnet9

iface pnet9 inet static

                bridge_ports eth9

                bridge_stp off

                bridge_hw 00:00:00:00:00:01 #required to ensure bridge is selected

                address 192.168.255.1 #must match with DHCP server

                netmask 255.255.255.0

                network 192.168.255.0

Save file

Install DHCP server

$> sudo apt-get install isc-dhcp-server

Configure the DHCP server to be attached to Cloud9.

$>sudo vi /etc/default/isc-dhcp-server

Scroll to the bottom and edit the line below:

$> INTERFACES=”pnet9”

Configure the DHCP by

$> sudo vi /etc/dhcp/dhcpd.conf

Comment out or delete the existing lines and create the following:

Authoritative;

# EVE-NG NAT Interface

subnet 192.168.255.0 netmask 255.255.255.0 {

        range 192.168.255.10 192.168.255.240;

        interface pnet9;

        default-lease-time 600;

        max-lease-time 7200;

        option domain-name "eve-ng.com";

        option domain-name-servers 8.8.8.8;

        option broadcast-address 192.168.255.255;

        option subnet-mask 255.255.255.0;

        option routers 192.168.255.1;

}

Attach devices to pnet for NAT address in 192.168.255.10-240 range with DHCP enabled.

byronyj

除將「/etc/network/interfaces」內的comments與相關的設定由同一列分開為不同列外，本人依樓主所言完成設定，DHCP Server已成功運作，感謝樓主！

tommiy

If you want to expose pnet9 IP address and Port to internet via pnet0 the below should work

sudo iptables -A FORWARD -i pnet0 -o pnet9 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A FORWARD -i pnet9 -o pnet0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -t nat -A PREROUTING -i pnet0 -p tcp --dport <pnet0 port> -j DNAT --to-destination <Pnet9 IP>
sudo iptables -t nat -A POSTROUTING -o pnet9 -p tcp --dport <pnet9 port> -d <pnet9 IP> -j SNAT --to-source 192.168.255.1

byronyj

感謝樓主再次的補充。

小迷糊亮

thinks for your shared!!

Qingbowang9494

非常感谢您的分享

Rhythm

非常感谢这个方法

frosthead

Thanks for sharing!