{"id":1640,"date":"2022-05-29T11:48:48","date_gmt":"2022-05-29T03:48:48","guid":{"rendered":"https:\/\/www.strongd.net\/?p=1640"},"modified":"2022-05-29T11:48:48","modified_gmt":"2022-05-29T03:48:48","slug":"penwrt-%e7%bb%93%e5%90%88-tinc-%e7%bb%84%e8%87%aa%e5%b7%b1%e7%9a%84-sdlan%ef%bc%88step-by-step%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.strongd.net\/?p=1640","title":{"rendered":"penWRT \u7ed3\u5408 tinc \u7ec4\u81ea\u5df1\u7684 SDLAN\uff08Step by Step\uff09"},"content":{"rendered":"

\u672c\u6587\u4e3b\u8981\u5b9e\u73b0\u5728OpenWRT\u8def\u7531\u5668\u4ee5\u53ca\u4e0d\u540c\u7cfb\u7edf\u4e0b\u901a\u8fc7tinc switch mode\u642d\u5efaSDLAN\u5185\u7f51\u670d\u52a1\u5668\u65b9\u4fbf\u8fdc\u7a0b\u8fde\u63a5\uff0c<\/p>\n

Switch Mode\u76f8\u5bf9\u6765\u8bf4\u914d\u7f6e\u6bd4\u8f83\u7b80\u5355\uff0c\u5404\u8282\u70b9\u5747\u5728\u540c\u4e00\u5e7f\u64ad\u57df\u5185\uff0c\u65b9\u4fbf\u8c03\u63a7\uff0ctinc\u8282\u70b9\u672c\u8eab\u901a\u8fc7DNAT+SNAT\u53ef\u4ee5\u5b9e\u73b0\u5bf9\u4e0d\u540c\u7f51\u95f4\u7aef\u53e3\u7684\u8c03\u901a\uff0c<\/p>\n

\u540c\u65f6Switch Mode\u4e2d\u5404\u8282\u70b9\u7684hosts\u6587\u4ef6\u53ea\u9700\u4fdd\u8bc1\u5728\u516c\u7f51\u5730\u5740\u7684\u8282\u70b9\u4e2d\u5168\u90e8\u62e5\u6709\u7ef4\u62a4\u5373\u53ef\uff0c\u5176\u4ed6\u8282\u70b9\u53ea\u9700\u7ef4\u62a4\u672c\u8282\u70b9\u4ee5\u53ca\u516c\u7f51\u8282\u70b9\u7684hosts\u6587\u4ef6<\/p>\n

\u4e0b\u9762\u4e3b\u8981\u5206\u4e09\u6b65\uff1a<\/p>\n

\uff081\uff09\u516c\u7f51\u8282\u70b9\u7684\u90e8\u7f72(Master\u8282\u70b9)<\/p>\n

\uff082\uff09\u5176\u4ed6\u8282\u70b9\u7684\u90e8\u7f72(Slave\u8282\u70b9)<\/p>\n

\uff083\uff09\u8282\u70b9\u7684NAT\u914d\u7f6e<\/p>\n

\u672c\u6b21\u642d\u5efa\u7684\u62d3\u6251\u4ee5\u4e0b\u4e3a\u4f8b\uff0c\u4e24\u4e2aMaster\u8282\u70b9\uff0c\u82e5\u5e72\u4e2aSlave\u8282\u70b9\uff08\u4ee53\u4e2a\u4e0d\u540c\u64cd\u4f5c\u7cfb\u7edf\u7684\u4e3a\u4f8b\uff09<\/p>\n

<\/figure>\n

\uff080\uff09tinc\u7684\u5b89\u88c5<\/p>\n

\u5404\u5927Linux\u53d1\u884c\u7248\u57fa\u672c\u90fd\u53ef\u4ee5\u901a\u8fc7\u5305\u7ba1\u7406\u5bf9tinc\u8fdb\u884c\u5b89\u88c5<\/p>\n

\n
sudo yum install tinc\r\nsudo apt install tinc <\/code><\/pre>\n<\/div>\n
OpenWRT\u4e5f\u53ef\u901a\u8fc7opkg\u5b89\u88c5tinc<\/p>\n
\n
opkg update\r\nopkg install tinc<\/code><\/pre>\n<\/div>\n
Windows\u53ef\u5728\u5b98\u7f51\u4e0b\u8f7d<\/p>\n
https:\/\/www.tinc-vpn.org\/packages\/windows\/tinc-1.1pre17-install.exe<\/span>\u200bwww.tinc-vpn.org\/packages\/windows\/tinc-1.1pre17-install.exe<\/span><\/span><\/a><\/div>\n
Windows\u4e2d\u81ea\u5e26\u7684TAP-Windwos\u7248\u672c\u6bd4\u8f83\u4f4e\uff0c\u5efa\u8bae\u53ef\u4ee5\u8003\u8651\u53e6\u5916\u5b89\u88c5\u7248\u672c\u8f83\u65b0\u7684TAP-Windows\u65b0\u5efa\u865a\u62df\u7f51\u5361\u800c\u4e0d\u662f\u7528tinc-vpn\u5b89\u88c5\u5305\u4e2d\u81ea\u5e26\u7684TAP-Windows<\/p>\n
\uff081\uff09\u516c\u7f51\u8282\u70b9\u7684\u90e8\u7f72(Master\u8282\u70b9)<\/p>\n
\u9700\u8981\u9884\u5148\u5b9a\u4e49\u5b9a\u4e49\u4e00\u4e2a\u7f51\u7edc\u540d \u672c\u6b21\u4ee5tincnet\u4e3a\u4f8bNETNAME = tincnet<\/p>\n
\u6bcf\u4e2a\u8282\u70b9\u5747\u9700\u8981\u4ee5\u4ee5\u4e0b\u76ee\u5f55\u7ed3\u6784\u521b\u5efa\u597d\u914d\u7f6e\u6587\u4ef6\u5939<\/p>\n
\/etc\/tinc\/tincnet<\/p>\n
\n
 % ls -la\r\ntotal 24\r\ndrwxr-xr-x 3 root root 4096 Mar  4 15:07 .\r\ndrwxr-xr-x 4 root root 4096 Mar  4 15:06 ..\r\ndrwxr-xr-x 2 root root 4096 Mar  4 15:06 hosts\r\n-rwxr-xr-x 1 root root  198 Mar  4 15:06 tinc.conf\r\n-rwxr-xr-x 1 root root   72 Mar  4 15:06 tinc-down\r\n-rwxr-xr-x 1 root root   81 Mar  4 15:06 tinc-up<\/code><\/pre>\n<\/div>\n
tinc.conf\u4e3atinc\u7684\u914d\u7f6e\u6587\u4ef6,tinc-down,tinc-up\u4e3a\u542f\u52a8tinc\u65f6\u6267\u884c\u7684\u811a\u672c\uff0c\u4e00\u822c\u7528\u4f5c\u542f\u52a8\u7f51\u7edc\uff0chosts\u6587\u4ef6\u5939\u4e2d\u5b58\u7684\u662f\u5404\u4e2a\u7ed3\u70b9\u7684\u8fde\u63a5\u4ea4\u6362\u4fe1\u606f\u3002<\/p>\n
\u4e0b\u9762\u5148\u8bf4\u5176\u4e2d\u4e00\u4e2a\u8282\u70b9Linux_Public_Node(2.2.2.2)<\/p>\n
\u5404\u4e2a\u6587\u4ef6\u914d\u7f6e\u60c5\u51b5\uff1a<\/p>\n
tinc.conf<\/p>\n
\n
 % cat tinc.conf \r\nName = Linux_Public_Node #\u6b64\u8282\u70b9\u540d\u79f0\u4e3aLinux_Public_Node\r\nAddressFamily = ipv4 #Internet\u8d70IPv4\u534f\u8bae\r\nBindToAddress = * 11001 #\u76d1\u542c\u7aef\u53e3\r\nInterface = tinctun0 #tincnet\u865a\u62df\u7f51\u5361\r\nDevice = \/dev\/net\/tun \r\n#Mode = <router|switch|hub> (router)\r\nMode = switch #\u8bbe\u7f6e\u4f7f\u7528Swtich\u6a21\u5f0f \u9ed8\u8ba4\u4e3arouter\r\nConnectTo = OpenWRT_Public_Node  #\u8fde\u63a5\u53e6\u4e00\u516c\u7f51Master\u8282\u70b9\u4fdd\u6301\u53cc\u6d3b\r\nCipher = aes-128-cbc #\u5bf9\u79f0\u52a0\u5bc6\u7b97\u6cd5<\/code><\/pre>\n<\/div>\n
tinc-up tinc\u542f\u52a8\u811a\u672c\uff0c\u7ed9\u5bf9\u5e94\u7f51\u5361\u52a0IP<\/p>\n
\n
 % cat tinc-up\r\n#!\/bin\/sh\r\nip link set $INTERFACE up\r\nip addr add 192.168.212.8\/24 dev $INTERFACE<\/code><\/pre>\n<\/div>\n
tinc-down tinc\u505c\u6b62\u811a\u672c\uff0c\u5173\u505c\u5bf9\u5e94\u7f51\u5361<\/p>\n
\n
#!\/bin\/sh\r\nip addr del 192.168.212.8\/24 dev $INTERFACE\r\nip link set $INTERFACE down<\/code><\/pre>\n<\/div>\n
hosts\u6587\u4ef6\u5939 \u4e3b\u8981\u4fdd\u5b58\u5404\u8282\u70b9\u7684\u4ea4\u6362\u4fe1\u606f\uff0c\u7531\u4e8e\u662f\u7b2c\u4e00\u6b21\u521b\u5efa\uff0c\u91cc\u9762\u5e94\u8be5\u662f\u7a7a\u6587\u4ef6\u5939\uff0c\u9700\u8981\u5148\u521b\u5efa\u4e00\u4e2a\u81ea\u5df1\u8282\u70b9\u7684\u94fe\u63a5\u4fe1\u606f<\/p>\n
\n
 cd hosts\r\n touch Linux_Public_Node<\/code><\/pre>\n<\/div>\n
\n
 % cat Linux_Public_Node \r\nAddress = 2.2.2.2 #\u516c\u7f51\u5730\u5740\r\nSubnet = 192.168.212.8\/32 #tincnetIP\u4fe1\u606f\r\nPort = 11001 #\u516c\u7f51\u76d1\u542c\u7aef\u53e3<\/code><\/pre>\n<\/div>\n
\u521b\u5efa\u5b8c\u6210\u540e\u901a\u8fc7tincd\u751f\u6210\u975e\u5bf9\u79f0\u5bc6\u94a5\u4fe1\u606f<\/p>\n
\n
 % sudo tincd -n tincnet -K\r\nGenerating 2048 bits keys:\r\n.............+++++ p\r\n........................+++++ q\r\nDone.\r\nPlease enter a file to save private RSA key to [\/etc\/tinc\/tincnet\/rsa_key.priv]: \r\nPlease enter a file to save public RSA key to [\/etc\/tinc\/tincnet\/hosts\/Linux_Public_Node]: <\/code><\/pre>\n<\/div>\n
\u73b0\u5728tincnet\u6587\u4ef6\u5939\u4e2d\u4f1a\u751f\u6210\u79c1\u94a5\uff0c\u5bf9\u5e94\u7684\u516c\u94a5\u4fe1\u606f\u4f1a\u8865\u5168\u5230host\/Linux_Public_Node\u4e2d<\/p>\n
\n
 % ls \/etc\/tinc\/tincnet                    \r\nhosts  rsa_key.priv  tinc.conf\ttinc-down  tinc-up\r\n\r\n % cat \/etc\/tinc\/tincnet\/hosts\/Linux_Public_Node \r\nAddress = 2.2.2.2 \r\nSubnet = 192.168.212.8\/32\r\nPort = 11001\r\n-----BEGIN RSA PUBLIC KEY-----\r\nMIIBCgKCAQEAp7F+8s8lukRv0qaE5hzrQmuy2MPb8hlte\/G0pcfnBCVjIL5foJ7P\r\nLZQrTGTsKjRbPzJ9gfZUXiZRkaA+G6Q4DBOVEt41cTceZTgAzL3ief3H6MNXQ0xW\r\n1Wo8kDNlg6g+QJq8iV5j7adJnEPivrDm4CWl8MRmVOckisnQbseKXeuzIYDhpZLA\r\nnlIIGMzhk3OZoPn2xpdMbJqbR0K6SrPvYq7sT3eLn0NVUbyo9D1dmtwtOJy8wmaf\r\noYdwTvrMdXhNNUmemnswJt8T2j8rAerqnjqz5itN8dk9mZMTKLFZ44CNnJ8jl5pE\r\nma8lfUnAA\/Qq7i9t74pVEvWcLg8HIry16QIDAQAB\r\n-----END RSA PUBLIC KEY-----<\/code><\/pre>\n<\/div>\n
\u81f3\u6b64\uff0c\u8282\u70b9Linux_Public_Node(2.2.2.2)\u4e2d\u7684\u914d\u7f6e\u5df2\u7ecf\u5b8c\u6210\uff0c<\/p>\n
\u4e0b\u9762\u914d\u7f6e\u53e6\u5916\u4e00\u4e2a\u8282\u70b9OpenWRT_Public_Node(1.1.1.1)<\/p>\n
\u4e3b\u8981\u7684\u914d\u7f6e\u6587\u4ef6\u751f\u6210\u8fc7\u7a0b\u8282\u70b9Linux_Public_Node\u7c7b\u4f3c<\/p>\n
\u751f\u6210\u540e\u5982\u4e0b\uff1a<\/p>\n
\n
ls -la \/etc\/tinc\/tincnet\/\r\ndrwxr-xr-x    3 root     root          4096 Mar  4 15:32 .\r\ndrwxr-xr-x    4 root     root          4096 Mar  4 15:29 ..\r\ndrwxr-xr-x    2 root     root          4096 Mar  4 15:32 hosts\r\n-rw-------    1 root     root          1680 Mar  4 15:32 rsa_key.priv\r\n-rwxr-xr-x    1 root     root            72 Mar  4 15:30 tinc-down\r\n-rwxr-xr-x    1 root     root            80 Mar  4 15:30 tinc-up\r\n-rw-r--r--    1 root     root           218 Mar  4 15:31 tinc.conf\r\n\r\nls -la \/etc\/tinc\/tincnet\/hosts\r\ndrwxr-xr-x    2 root     root          4096 Mar  4 15:32 .\r\ndrwxr-xr-x    3 root     root          4096 Mar  4 15:32 ..\r\n-rw-r--r--    1 root     root           484 Mar  4 15:32 OpenWRT_Public_Node\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc.conf \r\nName = OpenWRT_Public_Node\r\nAddressFamily = ipv4\r\nBindToAddress = * 11001\r\nInterface = tinctun0\r\nDevice = \/dev\/net\/tun\r\n#Mode = <router|switch|hub> (router)\r\nMode = switch\r\nConnectTo = Linux_Public_Node\r\nCipher = aes-128-cbc\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc-up\r\n#!\/bin\/sh\r\nip link set $INTERFACE up\r\nip addr add 192.168.212.6\/24 dev $INTERFACE\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc-down\r\nip addr del 192.168.212.6\/24 dev $INTERFACE\r\nip link set $INTERFACE down\r\n\r\ncat \/etc\/tinc\/tincnet\/hosts\/OpenWRT_Public_Node \r\nAddress = 1.1.1.1\r\nSubnet = 192.168.212.6\/32\r\nPort = 11001\r\n-----BEGIN RSA PUBLIC KEY-----\r\nMIIBCgKCAQEA6Tzot1eXupi+NRCfr29iKbgiXEMW1Ol327WOrAwRtiwGgQIx8LcL\r\niy9m+sZEWVzlfvhMub6RVM4xlZ39ghYn2OFP4x9K4D6O\/HTZHbamuLOEG5zRyVGK\r\nEN+tTStIeEaiHad04QR+6ZFB+UO7WFcBzwVh\/rysOL96KaUoU9VeYHVAIkubNsvA\r\naNSFbmqGYpl5FrXv+sJjMyGRXjc9Lb3q\/FWmPApvo\/9FTElHx0xH7wvAZnc7mTCH\r\nDB6DN62A1McgydGpn7NLnuFFEeVQf3SI9TqvajcA3vXS8P9RWuRoF5HivZIL5Ebn\r\nFJg0UkyJcWXHUNRczdfTACF6ha0ewk8T9QIDAQAB\r\n-----END RSA PUBLIC KEY-----<\/code><\/pre>\n<\/div>\n
OpenWRT\u4e0b\u9700\u8981\u518d\u5bf9\/etc\/config\/tinc\u8fdb\u884c\u4ee5\u4e0b\u4fee\u6539<\/p>\n
\n
cat \/etc\/config\/tinc \r\nconfig tinc-net tincnet\r\n\toption enabled 1\r\n\toption Name OpenWRT_Public_Node\r\n\r\nconfig tinc-host OpenWRT_Public_Node\r\n\toption enabled 1\r\n\toption net tincnet<\/code><\/pre>\n<\/div>\n
\u4e0b\u9762\u8981\u505a\u7684\u5c31\u662f\u5148\u5c06\u4e24\u4e2aMaster\u8282\u70b9\u7684hosts\u6587\u4ef6\u5939\u5404\u81ea\u8865\u5145\u5bf9\u65b9\u7684\u8282\u70b9\u4fe1\u606f\uff0c\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u590d\u5236\u81ea\u5df1\u90a3\u4efd\u8fc7\u53bb\u5bf9\u9762\uff0c\u4fdd\u8bc1\u4e24\u4e2a\u8282\u70b9\u7684hosts\u6587\u4ef6\u5939\u90fd\u6709\u5168\u90e8\u8282\u70b9\u7684hosts\u4fe1\u606f<\/p>\n
\n
% ls -la \/etc\/tinc\/tincnet\/hosts \r\ntotal 16\r\ndrwxr-xr-x 2 root root 4096 Mar  4 15:37 .\r\ndrwxr-xr-x 3 root root 4096 Mar  4 15:25 ..\r\n-rw-r--r-- 1 root root  486 Mar  4 15:25 Linux_Public_Node\r\n-rw-r--r-- 1 root root  485 Mar  4 15:37 OpenWRT_Public_Node\r\n\r\n% cat Linux_Public_Node \r\nAddress = 2.2.2.2 \r\nSubnet = 192.168.212.8\/32\r\nPort = 11001\r\n-----BEGIN RSA PUBLIC KEY-----\r\nMIIBCgKCAQEAp7F+8s8lukRv0qaE5hzrQmuy2MPb8hlte\/G0pcfnBCVjIL5foJ7P\r\nLZQrTGTsKjRbPzJ9gfZUXiZRkaA+G6Q4DBOVEt41cTceZTgAzL3ief3H6MNXQ0xW\r\n1Wo8kDNlg6g+QJq8iV5j7adJnEPivrDm4CWl8MRmVOckisnQbseKXeuzIYDhpZLA\r\nnlIIGMzhk3OZoPn2xpdMbJqbR0K6SrPvYq7sT3eLn0NVUbyo9D1dmtwtOJy8wmaf\r\noYdwTvrMdXhNNUmemnswJt8T2j8rAerqnjqz5itN8dk9mZMTKLFZ44CNnJ8jl5pE\r\nma8lfUnAA\/Qq7i9t74pVEvWcLg8HIry16QIDAQAB\r\n\r\n% cat OpenWRT_Public_Node \r\nAddress = 1.1.1.1\r\nSubnet = 192.168.212.6\/32\r\nPort = 11001\r\n-----BEGIN RSA PUBLIC KEY-----\r\nMIIBCgKCAQEA6Tzot1eXupi+NRCfr29iKbgiXEMW1Ol327WOrAwRtiwGgQIx8LcL\r\niy9m+sZEWVzlfvhMub6RVM4xlZ39ghYn2OFP4x9K4D6O\/HTZHbamuLOEG5zRyVGK\r\nEN+tTStIeEaiHad04QR+6ZFB+UO7WFcBzwVh\/rysOL96KaUoU9VeYHVAIkubNsvA\r\naNSFbmqGYpl5FrXv+sJjMyGRXjc9Lb3q\/FWmPApvo\/9FTElHx0xH7wvAZnc7mTCH\r\nDB6DN62A1McgydGpn7NLnuFFEeVQf3SI9TqvajcA3vXS8P9RWuRoF5HivZIL5Ebn\r\nFJg0UkyJcWXHUNRczdfTACF6ha0ewk8T9QIDAQAB\r\n-----END RSA PUBLIC KEY-----<\/code><\/pre>\n<\/div>\n
\u6700\u540e\u901a\u8fc7systemctl\uff0cOpenWRT\u901a\u8fc7RC\u542f\u52a8tinc, \u5e76\u4e92ping\u6d4b\u8bd5\u4e00\u4e0b<\/p>\n
\n
#Linux_Public_Node systemctl\r\nsystemctl start tinc@tincnet\r\n#OpenWRT_Public_Node rc\r\n\/etc\/init.d\/tinc start<\/code><\/pre>\n<\/div>\n
ping from Linux_Public_Node(192.168.212.8) to OpenWRT_Public_Node(192.168.212.6)<\/p>\n
<\/figure>\n
ping from OpenWRT_Public_Node(192.168.212.6) to Linux_Public_Node(192.168.212.8)<\/p>\n
<\/figure>\n
\uff082\uff09\u5176\u4ed6\u8282\u70b9\u7684\u90e8\u7f72(Slave\u8282\u70b9)<\/p>\n
Linux\u7cfb\u7edf\u4ee5\u8282\u70b9OpenWRT_Internal_Node(192.168.212.12)\u4e3a\u4f8b<\/p>\n
\u540c\u6837\uff0c\u5148\u6309\u7167\u4e4b\u524d\u7684\u6587\u4ef6\u5939\u7ed3\u6784\u521b\u5efa\u597d\u5bf9\u5e94\u76ee\u5f55\uff0c\u5e76\u590d\u5236\u4e24\u4e2aMaster\u8282\u70b9hosts\u4fe1\u606f\u5230hosts\u6587\u4ef6\u5939\uff0c<\/p>\n
\n
ls -la \/etc\/tinc\/tincnet\/\r\ndrwxr-xr-x    3 root     root             0 Mar  4 16:01 .\r\ndrwxr-xr-x    4 root     root             0 Mar  4 15:52 ..\r\ndrwxr-xr-x    2 root     root             0 Mar  4 16:01 hosts\r\n-rw-------    1 root     root          1676 Mar  4 16:01 rsa_key.priv\r\n-rwxr-xr-x    1 root     root            74 Mar  4 15:58 tinc-down\r\n-rwxr-xr-x    1 root     root            82 Mar  4 15:58 tinc-up\r\n-rw-r--r--    1 root     root           209 Mar  4 16:00 tinc.conf\r\n\r\nls -la \/etc\/tinc\/tincnet\/hosts\/\r\ndrwxr-xr-x    2 root     root             0 Mar  4 16:01 .\r\ndrwxr-xr-x    3 root     root             0 Mar  4 16:01 ..\r\n-rw-r--r--    1 root     root             0 Mar  4 15:58 Linux_Public_Node\r\n-rw-r--r--    1 root     root           454 Mar  4 16:01 OpenWRT_Internal_Node\r\n-rw-r--r--    1 root     root             0 Mar  4 15:58 OpenWRT_Public_Node\r\n\r\ncat \/etc\/tinc\/tincnet\/\r\nhosts\/        rsa_key.priv  tinc-down     tinc-up       tinc.conf\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc.conf \r\nName = OpenWRT_Internal_Node \r\nInterface = tinctun0\r\nDevice = \/dev\/net\/tun\r\n#Mode = <router|switch|hub> (router)\r\nMode = switch\r\nConnectTo = Linux_Public_Node #\u6b64\u5904\u9700\u8981\u914d\u7f6e\u94fe\u63a5\u5230\u4e24\u4e2a\u4e3b\u8282\u70b9\r\nConnectTo = OpenWRT_Public_Node #\u6b64\u5904\u9700\u8981\u914d\u7f6e\u94fe\u63a5\u5230\u4e24\u4e2a\u4e3b\u8282\u70b9\r\nCipher = aes-128-cbc\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc-up\r\n#!\/bin\/sh\r\nip link set $INTERFACE up\r\nip addr add 192.168.212.12\/24 dev $INTERFACE\r\n\r\ncat \/etc\/tinc\/tincnet\/tinc-down\r\nip addr del 192.168.212.12\/24 dev $INTERFACE\r\nip link set $INTERFACE down\r\n\r\ncat \/etc\/tinc\/tincnet\/hosts\/OpenWRT_Internal_Node \r\nSubnet = 192.168.212.21\/32 #\u53ea\u9700\u8981\u914d\u7f6eSubnet\u53c2\u6570\r\n\r\n-----BEGIN RSA PUBLIC KEY-----\r\nMIIBCgKCAQEAnU1maDEvbyC2XJLC8aiiwixR+einVu9gyJ4Pi1uhNMSJuVHB0HLQ\r\ns16eOJvoEeJ4q6x0YLwjVJLlcLRW46wUAr1eMLjiovGKcYL8fZCg+Agms3+0y2SM\r\nMaKi5fgBKjXLhdeBx4pvLaBlgYz4BP7pcVLgI0\/NHBR6K1PClUtYDN1xCt5SOpiF\r\nXIwyIawwIs6mxLknm7M0a68j7e3ovIsBOW7nLVL0GpLXVJBjAbs5z00uNOVaNJkz\r\ntvttShGgaa+B6o1Xy8gLwB84wKNUXZbmkLobOK7h0qYgEmnQscR8Rhw5G9UJfU8G\r\n8nrPdRRCZnDR5xRpuy0rRJG7gAzpEJ9kHwIDAQAB\r\n-----END RSA PUBLIC KEY-----\r\n\r\n#\u4ee5\u4e0b\u4e3aOpenWRT\u7cfb\u7edf\u9700\u8981\u914d\u7f6e\r\ncat \/etc\/config\/tinc \r\nconfig tinc-net tincnet\r\n\toption enabled 1\r\n\toption Name OpenWRT_Internal_Node\r\n\r\nconfig tinc-host OpenWRT_Internal_Node\r\n\toption enabled 1\r\n\toption net tincnet<\/code><\/pre>\n<\/div>\n
\u7136\u540e\u9700\u8981\u590d\u5236hosts\u6587\u4ef6\u5939\u7684\u672c\u8282\u70b9\u4fe1\u606fhost\\OpenWRT_Internal_Node\u5230Master\u8282\u70b9\u7684hosts\u6587\u4ef6\u5939\u4e2d\uff0c\u91cd\u542ftinc\u670d\u52a1\u5373\u53ef\u901a\uff0c<\/p>\n
\n
ping 192.168.212.8\r\nPING 192.168.212.8 (192.168.212.8): 56 data bytes\r\n64 bytes from 192.168.212.8: seq=0 ttl=64 time=25.108 ms\r\n64 bytes from 192.168.212.8: seq=1 ttl=64 time=8.567 ms\r\n64 bytes from 192.168.212.8: seq=2 ttl=64 time=8.891 ms\r\n64 bytes from 192.168.212.8: seq=3 ttl=64 time=8.745 ms\r\n^C\r\n--- 192.168.212.8 ping statistics ---\r\n4 packets transmitted, 4 packets received, 0% packet loss\r\nround-trip min\/avg\/max = 8.567\/12.827\/25.108 ms\r\n\r\nping 192.168.212.6\r\nPING 192.168.212.6 (192.168.212.6): 56 data bytes\r\n64 bytes from 192.168.212.6: seq=0 ttl=64 time=7.328 ms\r\n64 bytes from 192.168.212.6: seq=1 ttl=64 time=6.871 ms\r\n64 bytes from 192.168.212.6: seq=2 ttl=64 time=7.205 ms\r\n64 bytes from 192.168.212.6: seq=3 ttl=64 time=7.130 ms\r\n^C\r\n--- 192.168.212.6 ping statistics ---\r\n4 packets transmitted, 4 packets received, 0% packet loss\r\nround-trip min\/avg\/max = 6.871\/7.133\/7.328 ms<\/code><\/pre>\n<\/div>\n
\u518d\u914d\u7f6e\u4e00\u4e2aWindows\u7cfb\u7edf\u7684,<\/p>\n
\u9996\u5148\u9700\u8981\u65b0\u589e\u4e00\u4e2aTAP-Windows\u7684\u865a\u62df\u7f51\u5361\uff0c\u4ee5\u53e6\u5916\u5b89\u88c5\u7684\u65b0\u7248\u672cTAP-Windows\u9a71\u52a8\u4e3a\u4f8b\uff0c\u7ba1\u7406\u5458\u6743\u9650\u8fd0\u884cCMD<\/p>\n
\n
C:\\Users\\k>cd C:\\Program Files\\TAP-Windows\\bin\r\n\r\nC:\\Program Files\\TAP-Windows\\bin>.\\addtap.bat\r\n\r\nC:\\Program Files\\TAP-Windows\\bin>rem Add a new TAP virtual ethernet adapter\r\n\r\nC:\\Program Files\\TAP-Windows\\bin>\"C:\\Program Files\\TAP-Windows\\bin\\tapinstall.exe\" install \"C:\\Program Files\\TAP-Windows\\driver\\OemVista.inf\" tap0901\r\nDevice node created. Install is complete when drivers are installed...\r\nUpdating drivers for tap0901 from C:\\Program Files\\TAP-Windows\\driver\\OemVista.inf.\r\nDrivers installed successfully.\r\n\r\nC:\\Program Files\\TAP-Windows\\bin>pause\r\n\u8bf7\u6309\u4efb\u610f\u952e\u7ee7\u7eed. . .\r\n<\/code><\/pre>\n<\/div>\n
\u5230\u7f51\u7edc\u8fde\u63a5\u7ba1\u7406\u4e2d\u91cd\u547d\u540d\u7f51\u5361\u540d\u79f0\u5e76\u624b\u52a8\u914d\u7f6eIP\u5730\u5740<\/p>\n
<\/figure>\n
<\/figure>\n
\u7136\u540e\u521b\u5efa\u597d\u6587\u4ef6\u76ee\u5f55<\/p>\n
\n
C:\\Program Files\\tinc\\tincnet \u7684\u76ee\u5f55\r\n\r\n2020\/03\/04  16:14    <DIR>          .\r\n2020\/03\/04  16:14    <DIR>          ..\r\n2020\/03\/04  16:16    <DIR>          hosts\r\n2020\/03\/04  16:17               167 tinc.conf\r\n               1 \u4e2a\u6587\u4ef6            167 \u5b57\u8282\r\n               3 \u4e2a\u76ee\u5f55 144,868,106,240 \u53ef\u7528\u5b57\u8282\r\n               \r\nC:\\Program Files\\tinc\\tincnet\\hosts \u7684\u76ee\u5f55\r\n\r\n2020\/03\/04  16:16    <DIR>          .\r\n2020\/03\/04  16:16    <DIR>          ..\r\n2020\/03\/04  16:16               499 Linux_Public_Node\r\n2020\/03\/04  16:16               496 OpenWRT_Public_Node\r\n2020\/03\/04  16:16                27 Windows_Internal_Node\r\n               3 \u4e2a\u6587\u4ef6          1,022 \u5b57\u8282\r\n               2 \u4e2a\u76ee\u5f55 144,864,964,608 \u53ef\u7528\u5b57\u8282<\/code><\/pre>\n<\/div>\n
C:\\Program Files\\tinc\\tincnet\\tinc.conf<\/p>\n
\n
Name<\/span> =<\/span> Windows_Internal_Node\r\nInterface<\/span> =<\/span> tinctun0\r\n#Mode = <router|switch|hub> (router)<\/span>\r\nMode<\/span> =<\/span> switch\r\nConnectTo<\/span> =<\/span> OpenWRT_Public_Node\r\nConnectTo<\/span> =<\/span> Linux_Public_Node<\/code><\/pre>\n<\/div>\n
C:\\Program Files\\tinc\\tincnet\\hosts\\Windows_Internal_Node<\/p>\n
\n
Subnet = 192.168.212.116\/32<\/code><\/pre>\n<\/div>\n
\u751f\u6210\u5bc6\u94a5<\/p>\n
\n
C:\\Program Files\\tinc>.\\tinc.exe -n tincnet\r\ntinc.tincnet> generate-rsa-keys\r\nGenerating 2048 bits keys:\r\n...................................................+++ p\r\n......................+++ q\r\nDone.\r\nPlease enter a file to save private RSA key to [C:\/Program Files\\tinc\\tincnet\\rsa_key.priv]:\r\nPlease enter a file to save public RSA key to [C:\/Program Files\\tinc\\tincnet\\hosts\\Windows_Internal_Node]:\r\ntinc.tincnet> quit\r\n\r\nC:\\Program Files\\tinc><\/code><\/pre>\n<\/div>\n
\u7136\u540e\u5c06\u5e26\u516c\u94a5\u4fe1\u606f\u7684Windows_Internal_Node\u590d\u5236\u5230\u4e24\u4e2aMaster\u8282\u70b9\u4e0a\u9762\u91cd\u542f\u8282\u70b9<\/p>\n
\u901a\u8fc7Windows\u8ba1\u7b97\u673a\u7ba1\u7406\u4e2d\u7684\u670d\u52a1\u542f\u52a8tinc<\/p>\n
<\/figure>\n
PING\u5176\u4ed6Slave\u8282\u70b9\u6d4b\u8bd5<\/p>\n
\n
C:\\Program Files\\tinc>ping 192.168.212.12\r\n\r\n\u6b63\u5728 Ping 192.168.212.12 \u5177\u6709 32 \u5b57\u8282\u7684\u6570\u636e:\r\n\u6765\u81ea 192.168.212.12 \u7684\u56de\u590d: \u5b57\u8282=32 \u65f6\u95f4=12ms TTL=64\r\n\u6765\u81ea 192.168.212.12 \u7684\u56de\u590d: \u5b57\u8282=32 \u65f6\u95f4=11ms TTL=64\r\n\u6765\u81ea 192.168.212.12 \u7684\u56de\u590d: \u5b57\u8282=32 \u65f6\u95f4=12ms TTL=64\r\n\u6765\u81ea 192.168.212.12 \u7684\u56de\u590d: \u5b57\u8282=32 \u65f6\u95f4=11ms TTL=64\r\n\r\n192.168.212.12 \u7684 Ping \u7edf\u8ba1\u4fe1\u606f:\r\n    \u6570\u636e\u5305: \u5df2\u53d1\u9001 = 4\uff0c\u5df2\u63a5\u6536 = 4\uff0c\u4e22\u5931 = 0 (0% \u4e22\u5931)\uff0c\r\n\u5f80\u8fd4\u884c\u7a0b\u7684\u4f30\u8ba1\u65f6\u95f4(\u4ee5\u6beb\u79d2\u4e3a\u5355\u4f4d):\r\n    \u6700\u77ed = 11ms\uff0c\u6700\u957f = 12ms\uff0c\u5e73\u5747 = 11ms\r\n<\/code><\/pre>\n<\/div>\n
\u5982\u679c\u8fd8\u6709\u65b0\u589e\u8282\u70b9\uff0c\u90a3\u4e48\u53ea\u9700\u5728\u8282\u70b9\u672c\u5730\u521b\u5efa\u597d\u914d\u7f6e\u6587\u4ef6\u4ee5\u53cahosts\u4fe1\u606f\uff0c\u7136\u540e\u5c06\u672c\u8282\u70b9\u7684hosts\u4fe1\u606f\u590d\u5236\u5230Master\u8282\u70b9\u4e0a\u9762\u5373\u53ef\u3002<\/p>\n
\uff083\uff09\u8282\u70b9\u7684NAT\u914d\u7f6e<\/p>\n
\u8fd9\u4e2a\u662f\u8865\u5145\u5185\u5bb9\uff0c\u6bd4\u5982Slave\u8282\u70b9OpenWRT_Internal_Node\u7684br-lan\u7f51\u5361\u6709\u53e6\u4e00\u7f51\u6bb5192.168.1.0\/24\u7684\u5730\u5740192.168.1.1\uff0c\u90a3\u4e48\u5982\u679c\u6211\u60f3\u5728Windows_Internal_Node\u901a\u8fc7OpenWRT_Internal_Node\u7684 tincnet\u5730\u5740192.168.212.12:8080\u76f4\u63a5\u8bbf\u95eeOpenWRT_Internal_Node 192.168.1.0\/24\u7f51\u6bb5\u4e2d\u7684192.168.1.20:80\uff0c\u90a3\u4e48\u53ef\u4ee5\u53ef\u4ee5\u901a\u8fc7NAT\u76f4\u63a5\u5b9e\u73b0\u3002<\/p>\n
\u5177\u4f53iptables\u914d\u7f6e\u5982\u4e0b\uff1a<\/p>\n
\n
iptables -A input_rule -i tinctun+ -j ACCEPT\r\niptables -A forwarding_rule -i tinctun+ -j ACCEPT\r\niptables -A forwarding_rule -o tinctun+ -j ACCEPT\r\niptables -A output_rule -o tinctun+ -j ACCEPT\r\n\r\niptables -t nat -A PREROUTING -i tinctun0 -p tcp -d 192.168.212.12 --dport 8080 -j DNAT --to-destination 192.168.1.20:80\r\niptables -t nat -A POSTROUTING -s 192.168.212.0\/24 -o br-lan -j SNAT --to 192.168.1.1<\/code><\/pre>\n<\/div>\n
refer: https:\/\/vnf.cc\/2020\/03\/openwrt-tinc\/<\/p>\n","protected":false},"excerpt":{"rendered":"
\u672c\u6587\u4e3b\u8981\u5b9e\u73b0\u5728OpenWRT\u8def\u7531\u5668\u4ee5\u53ca\u4e0d\u540c\u7cfb\u7edf\u4e0b\u901a\u8fc7tinc switch mode\u642d\u5efaSDLAN\u5185\u7f51\u670d\u52a1\u5668\u65b9\u4fbf\u8fdc\u7a0b\u8fde\u63a5\uff0c Switch Mode\u76f8\u5bf9\u6765\u8bf4\u914d\u7f6e\u6bd4\u8f83\u7b80\u5355\uff0c\u5404\u8282\u70b9\u5747\u5728\u540c\u4e00\u5e7f\u64ad\u57df\u5185\uff0c\u65b9\u4fbf\u8c03\u63a7\uff0ctinc\u8282\u70b9\u672c\u8eab\u901a\u8fc7DNAT+SNAT\u53ef\u4ee5\u5b9e\u73b0\u5bf9\u4e0d\u540c\u7f51\u95f4\u7aef\u53e3\u7684\u8c03\u901a\uff0c \u540c\u65f6Switch Mode\u4e2d\u5404\u8282\u70b9\u7684hosts\u6587\u4ef6\u53ea\u9700\u4fdd\u8bc1\u5728\u516c\u7f51\u5730\u5740\u7684\u8282\u70b9\u4e2d\u5168\u90e8\u62e5\u6709\u7ef4\u62a4\u5373\u53ef\uff0c\u5176\u4ed6\u8282\u70b9\u53ea\u9700\u7ef4\u62a4\u672c\u8282\u70b9\u4ee5\u53ca\u516c\u7f51\u8282\u70b9\u7684hosts\u6587\u4ef6 \u4e0b\u9762\u4e3b\u8981\u5206\u4e09\u6b65\uff1a \uff081\uff09\u516c\u7f51\u8282\u70b9\u7684\u90e8\u7f72(Master\u8282\u70b9) \uff082\uff09\u5176\u4ed6\u8282\u70b9\u7684\u90e8\u7f72(Slave\u8282\u70b9) \uff083\uff09\u8282\u70b9\u7684NAT\u914d\u7f6e \u672c\u6b21\u642d\u5efa\u7684\u62d3\u6251\u4ee5\u4e0b\u4e3a\u4f8b\uff0c\u4e24\u4e2aMaster\u8282\u70b9\uff0c\u82e5\u5e72\u4e2aSlave\u8282\u70b9\uff08\u4ee53\u4e2a\u4e0d\u540c\u64cd\u4f5c\u7cfb\u7edf\u7684\u4e3a\u4f8b\uff09 \uff080\uff09tinc\u7684\u5b89\u88c5 \u5404\u5927Linux\u53d1\u884c\u7248\u57fa\u672c\u90fd\u53ef\u4ee5\u901a\u8fc7\u5305\u7ba1\u7406\u5bf9tinc\u8fdb\u884c\u5b89\u88c5 sudo yum install tinc sudo apt install tinc OpenWRT\u4e5f\u53ef\u901a\u8fc7opkg\u5b89\u88c5tinc opkg update opkg install tinc Windows\u53ef\u5728\u5b98\u7f51\u4e0b\u8f7d https:\/\/www.tinc-vpn.org\/packages\/windows\/tinc-1.1pre17-install.exe\u200bwww.tinc-vpn.org\/packages\/windows\/tinc-1.1pre17-install.exe Windows\u4e2d\u81ea\u5e26\u7684TAP-Windwos\u7248\u672c\u6bd4\u8f83\u4f4e\uff0c\u5efa\u8bae\u53ef\u4ee5\u8003\u8651\u53e6\u5916\u5b89\u88c5\u7248\u672c\u8f83\u65b0\u7684TAP-Windows\u65b0\u5efa\u865a\u62df\u7f51\u5361\u800c\u4e0d\u662f\u7528tinc-vpn\u5b89\u88c5\u5305\u4e2d\u81ea\u5e26\u7684TAP-Windows \uff081\uff09\u516c\u7f51\u8282\u70b9\u7684\u90e8\u7f72(Master\u8282\u70b9) \u9700\u8981\u9884\u5148\u5b9a\u4e49\u5b9a\u4e49\u4e00\u4e2a\u7f51\u7edc\u540d \u672c\u6b21\u4ee5tincnet\u4e3a\u4f8bNETNAME = tincnet \u6bcf\u4e2a\u8282\u70b9\u5747\u9700\u8981\u4ee5\u4ee5\u4e0b\u76ee\u5f55\u7ed3\u6784\u521b\u5efa\u597d\u914d\u7f6e\u6587\u4ef6\u5939 \/etc\/tinc\/tincnet % ls -la total 24 drwxr-xr-x 3 root root 4096 Mar 4 15:07 . drwxr-xr-x 4 root … Continue reading penWRT \u7ed3\u5408 tinc \u7ec4\u81ea\u5df1\u7684 SDLAN\uff08Step by Step\uff09<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,35,20],"tags":[259,174],"class_list":["post-1640","post","type-post","status-publish","format-standard","hentry","category-linux","category-35","category-20","tag-tinc","tag-vpn"],"_links":{"self":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1640"}],"version-history":[{"count":1,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1640\/revisions"}],"predecessor-version":[{"id":1641,"href":"https:\/\/www.strongd.net\/index.php?rest_route=\/wp\/v2\/posts\/1640\/revisions\/1641"}],"wp:attachment":[{"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.strongd.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}