Pro virtualni switch je potreba priradit interface do VLAN. Pro verejne IP je pro vsechny zakazniky shodna VLAN ID = 4010. Dale je treba nastavit MTU na 1400.
Priklad konfigurace sitove karty “enp2s0”, VLAN ID 4010 pro segment 159.69.131.224/27
Gateway: 159.69.131.225 Netmask: 255.255.255.224 Broadcast: 159.69.131.255
ip link add link enp2s0 name enp2s0.4010 type vlan id 4010 ip link set enp2s0.4010 mtu 1400 ip link set dev enp2s0.4010 up
ip addr add 10.1.2.3/24 brd 10.1.2.255 dev enp2s0.4010
Pro verejne IP adresy je treba jeste nastavit podminene routovani. Nastavi se druha default gw pro danou verejnou IP
Priklad nastaveni pro IP 13.39.25.50 z verejneho subnetu 13.39.25.48/29, interface enp2s0.4010
echo "1 starlab" >> /etc/iproute2/rt_tables ip addr add 13.39.25.50/29 dev enp2s0.4010 ip rule add from 13.39.25.50 lookup starlab ip rule add to 13.39.25.50 lookup starlab ip route add default via 13.39.25.49 dev enp2s0.4010 table starlab
Sitova karta enp2s0, VLAN 4010, privatni rozsah
# /etc/network/interfaces auto enp2s0.4010 iface enp2s0.4010 inet static address 10.1.2.3 netmask 255.255.255.0 vlan-raw-device enp2s0 mtu 1400
Pridani IP 13.23.25.50 s verejneho subnetu 13.23.25.48/29 a IPv6 2001:eeee:aa:ffff::2 taktez z verejneho subnetu 2001:eeee:aa:ffff::/64 na vas server.
Je treba pridat routovaci pravidlo
echo "1 starlab" >> /etc/iproute2/rt_tables
# /etc/network/interfaces auto enp2s0.4010 iface enp2s0.4010 inet static address 192.168.100.1 netmask 255.255.255.0 vlan-raw-device enp2s0 mtu 1400 # ipv4 subnet up ip addr add 13.23.25.50/29 dev enp2s0.4010 up ip rule add from 13.23.25.50 lookup starlab up ip rule add to 13.23.25.50 lookup starlab up ip route add default via 13.23.25.49 dev enp2s0.4010 table starlab down ip addr del 13.23.25.50/29 dev enp2s0.4010 down ip route del default via 13.23.25.49 dev enp2s0.4010 table starlab down ip rule del to 13.23.25.50 lookup starlab down ip rule del from 13.23.25.50 lookup starlab # ipv6 subnet up ip -6 addr add 2001:eeee:aa:ffff::2/64 dev enp2s0.4010 up ip -6 rule add from 2001:eeee:aa:ffff::2 lookup starlab up ip -6 rule add to 2001:eeee:aa:ffff::2 lookup starlab up ip -6 route add default via 2001:eeee:aa:ffff::1 dev enp2s0.4010 table starlab down ip -6 addr del 2001:eeee:aa:ffff::2/125 dev enp2s0.4010 down ip -6 route del default via 2001:eeee:aa:ffff::1 dev enp2s0.4010 table starlab down ip -6 rule del to 2001:eeee:aa:ffff::2 lookup starlab down ip -6 rule del from 2001:eeee:aa:ffff::2 lookup starlab