在VyOS上配置一个4口路由器,网段为192.168.2.0,并通过PPPoE拨号上网,可以按照以下详细步骤进行配置:
- 进入编辑模式
进入VyOS的配置模式:
vyos@vyos# configure
- 设置主机名
设置路由器的主机名(可选):
vyos@vyos# set system host-name 77bx-vyos
- 配置PPPoE拨号
配置PPPoE拨号上网:
vyos@vyos# set interfaces pppoe pppoe0 authentication username 'userid'
vyos@vyos# set interfaces pppoe pppoe0 authentication password 'secret'
vyos@vyos# set interfaces pppoe pppoe0 source-interface eth0
其中,userid和secret是你的ISP提供的PPPoE用户名和密码。
- 配置网络接口
配置WAN接口(假设使用eth0):
vyos@vyos# set interfaces ethernet eth0 address dhcp
vyos@vyos# set interfaces ethernet eth0 pppoe 0
- 配置LAN接口
配置LAN接口(假设使用eth1):
vyos@vyos# set interfaces ethernet eth1 address 192.168.2.1/24
vyos@vyos# set interfaces ethernet eth1 description LAN
- 配置DHCP服务器
配置DHCP服务器以分配IP地址给内网设备:
vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 default-router 192.168.2.1
vyos@vyos# set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 dns-server 8.8.8.8
- 配置防火墙
配置防火墙以允许必要的流量通过:
vyos@vyos# set firewall name WAN_IN rule 10 action accept
vyos@vyos# set firewall name WAN_IN rule 10 source address 0.0.0.0/0
vyos@vyos# set firewall name WAN_IN rule 10 destination port 22
vyos@vyos# set firewall name WAN_IN rule 10 protocol tcp
vyos@vyos# set firewall name WAN_OUT rule 10 action accept
vyos@vyos# set firewall name WAN_OUT rule 10 source address 0.0.0.0/0
vyos@vyos# set firewall name WAN_OUT rule 10 destination port 22
vyos@vyos# set firewall name WAN_OUT rule 10 protocol tcp
vyos@vyos# set firewall name LAN_LOCAL rule 10 action accept
vyos@vyos# set firewall name LAN_LOCAL rule 10 source address 192.168.2.0/24
vyos@vyos# set firewall name LAN_LOCAL rule 10 destination address 192.168.2.0/24
vyos@vyos# set firewall all-packets enable
- 提交配置并保存
提交配置并保存:
vyos@vyos# commit
vyos@vyos# save
- 检查配置
检查配置是否正确:
vyos@vyos# show configuration commands
- 测试连接
重启网络接口以应用配置:
vyos@vyos# restart interface eth0
重启后,检查PPPoE连接是否成功:
vyos@vyos# show interfaces pppoe pppoe0
如果一切配置正确,VyOS路由器就已经成功配置为一个4口路由器,并通过PPPoE拨号上网。