bridge scenario

diff --git a/README.md b/README.md
index c7f3416c9f7724d05b857c54767d8972d03987c7..be9b3d4f608402a0cedaab25f9e98170d845c128 100644 (file)
--- a/README.md
+++ b/README.md
@@ -2364,7 +2364,7 @@ sudo ip netns exec net1 ip link set up lo
 
 sudo ip addr add 192.168.64.1/24 dev veth1
 
-sudo ip route add 192.168.64.0/24 dev veth1
+sudo ip route add 192.168.64.0/24 via 192.168.64.2 dev veth1
 
 sudo ip netns add net2
 
@@ -2383,11 +2383,13 @@ sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
 
 sudo ip netns exec net1 ip link add br0 type bridge stp_state 0
 
+sudo ip netns exec net1 ip link set br0 address 12:34:56:78:9a:bc
+
 sudo ip netns exec net1 ip link set veth2 master br0 
 
 sudo ip netns exec net1 ip link set veth3 master br0
 
-sudo ip netns exec net1 ip addr add 10.168.100.1/24 dev br0
+sudo ip netns exec net1 ip addr add 192.168.64.2/24 dev br0
 
 sudo ip netns exec net1 ip link set br0 up
 
@@ -2395,8 +2397,11 @@ sudo ip netns exec net1 ip link set veth2 up
 
 sudo ip netns exec net1 ip link set veth3 up
 
-sudo ip netns exec net1 ip route add default via 10.168.100.1 dev br0
+sudo ip netns exec net1 ip route add default via 192.168.64.1 dev br0
+
+sudo ip netns exec net1 ip route add 192.168.64.0/24 via 192.168.64.2 dev br0 proto static
 
+sudo iptables -t nat -I POSTROUTING -p all -o br0 -j MASQUERADE
 ```
 
 

diff --git a/ip/bridge-construct.sh b/ip/bridge-construct.sh
index a6ab93dec8f765a2554f927fcdbb6a941d0d9fff..6db4377ab74c63653ef5e44e9e21877b62a65104 100755 (executable)
--- a/ip/bridge-construct.sh
+++ b/ip/bridge-construct.sh
@@ -11,7 +11,7 @@ sudo ip netns exec net1 ip link set up lo
 
 sudo ip addr add 192.168.64.1/24 dev veth1
 
-sudo ip route add 192.168.64.0/24 dev veth1
+sudo ip route add 192.168.64.0/24 via 192.168.64.2 dev veth1
 
 sudo ip netns add net2
 
@@ -30,11 +30,13 @@ sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
 
 sudo ip netns exec net1 ip link add br0 type bridge stp_state 0
 
+sudo ip netns exec net1 ip link set br0 address 12:34:56:78:9a:bc
+
 sudo ip netns exec net1 ip link set veth2 master br0 
 
 sudo ip netns exec net1 ip link set veth3 master br0
 
-sudo ip netns exec net1 ip addr add 10.168.100.1/24 dev br0
+sudo ip netns exec net1 ip addr add 192.168.64.2/24 dev br0
 
 sudo ip netns exec net1 ip link set br0 up
 
@@ -42,4 +44,8 @@ sudo ip netns exec net1 ip link set veth2 up
 
 sudo ip netns exec net1 ip link set veth3 up
 
-sudo ip netns exec net1 ip route add default via 10.168.100.1 dev br0
+sudo ip netns exec net1 ip route add default via 192.168.64.1 dev br0
+
+sudo ip netns exec net1 ip route add 192.168.64.0/24 via 192.168.64.2 dev br0 proto static
+
+sudo iptables -t nat -I POSTROUTING -p all -o br0 -j MASQUERADE

diff --git a/ip/bridge-tmp.sh b/ip/bridge-tmp.sh
deleted file mode 100755 (executable)
index 6b8d213..0000000
--- a/ip/bridge-tmp.sh
+++ /dev/null
@@ -1,58 +0,0 @@
-#!/bin/bash
-
-
-sudo ip netns add net1
-
-sudo ip link add dev veth1 type veth peer name veth2 netns net1
-
-sudo ip link set up veth1
-
-sudo ip netns exec net1 ip link set up lo
-
-sudo ip addr add 192.168.64.1/24 dev veth1
-
-sudo ip route add 192.168.122.100/30 via 192.168.64.2 dev veth1
-
-sudo ip netns add net2
-
-sudo ip link add dev veth3 type veth peer name veth4 netns net2
-
-sudo ip link set veth3 netns net1
-
-sudo ip netns exec net2 ip link set up veth4
-
-sudo ip netns exec net2 ip addr add 192.168.122.101/24 dev veth4
-
-sudo ip netns exec net2 ip route add default via 192.168.122.87 dev veth4
-
-sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
-
-
-sudo ip netns exec net1 ip link add br0 type bridge stp_state 0
-
-sudo ip netns exec net1 ip link set br0 address 12:34:56:78:9a:bc
-
-sudo ip netns exec net1 ip link set veth2 master br0 
-
-sudo ip netns exec net1 ip link set veth3 master br0
-
-sudo ip netns exec net1 ip addr add 192.168.64.2/24 dev br0
-
-sudo ip netns exec net1 ip link set br0 up
-
-sudo ip netns exec net1 ip link set veth2 up 
-
-sudo ip netns exec net1 ip link set veth3 up
-
-sudo ip netns exec net1 ip route add default via 192.168.64.1 dev br0
-
-sudo ip netns exec net1 ip route add 192.168.122.100/30 via 192.168.64.2 dev br0 
-
-sudo ip netns exec net1 sysctl -w net.ipv4.ip_forward=1
-
-sudo ip netns exec net1 iptables -P FORWARD ACCEPT
-
-sudo ip netns exec net1 iptables -I OUTPUT -p icmp -o br0 -j DROP
-
-
-#sudo modprobe br_netfilter
\ No newline at end of file