{"id":403,"date":"2024-04-25T17:17:25","date_gmt":"2024-04-25T08:17:25","guid":{"rendered":"http:\/\/www.iwgh.run\/?p=403"},"modified":"2024-04-26T08:31:58","modified_gmt":"2024-04-25T23:31:58","slug":"pnat-%ea%b5%ac%ec%84%b1%ec%9c%bc%eb%a1%9c-%eb%82%b4%eb%b6%80ip%ec%9d%98-%ec%9d%b8%ed%84%b0%eb%84%b7-%ec%82%ac%ec%9a%a9","status":"publish","type":"post","link":"https:\/\/iwgh.duckdns.org\/?p=403","title":{"rendered":"pNAT \uad6c\uc131\uc73c\ub85c \ub0b4\ubd80IP\uc758 \uc778\ud130\ub137 \uc0ac\uc6a9."},"content":{"rendered":"\n

\ub0b4\ubd80 \ub2e4\uc218\uc758 \uc11c\ubc84\uc5d0 \uc0ac\uc124IP\ub97c \ud560\ub2f9\ud558\uace0 \uc678\ubd80\uc778\ud130\ub137\uacfc \uc5f0\uacb0\ub418\ub294 1\ub300\uc758 \uc11c\ubc84\ub97c \ud1b5\ud574 \uc0ac\uc124\ub300\uc5ed\uc5d0 \uc778\ud130\ub137\uc744 \uac00\ub2a5\ud558\uac8c \ud558\uae30\uc704\ud55c pNAT \uad6c\uc131\uc608\uc2dc<\/strong><\/p>\n\n\n\n

\"\"
\uad6c\uc131\ub3c4<\/figcaption><\/figure>\n\n\n\n
1. VMWARE Network <\/strong>\uad6c\uc131<\/strong><\/h5>\n\n\n\n
- vSwitch0 -> Port groups \uc124\uc815\uc5d0\uc11c \"VM Network\" \uc0ac\ub0b4 \ub0b4\ubd80IP\ub85c \uad6c\uc131 192.168.240.0\/21 \ub300\uc5ed
- Internal-vSwitch0 -> ESXi \uc11c\ubc84\ub07c\ub9ac \uc5f0\uacb0\ub41c VM \ub0b4\ubd80\ub300\uc5ed \ub9c8\ucc2c\uac00\uc9c0\ub85c \"internal-VMnetwork\"\uc73c\ub85c \uad6c\uc131 10.10.10.0\/24 \ub300\uc5ed\uc73c\ub85c \uc124\uc815<\/strong><\/pre>\n\n\n\n
2. pNAT\uc6a9\uc11c\ubc84\uad6c\uc131<\/strong><\/h5>\n\n\n\n
– Ubuntu 22.04 \uc124\uce58<\/strong><\/h6>\n\n\n\n
Ubuntu 22.04.3 server OS \uc124\uce58.
VM Network\/internal-VMnetwork 2\uac1c\uc758 vNIC \uc0dd\uc131
\uc0ac\uc6a9 \ud328\ud0a4\uc9c0 \uc124\uce58 openssh, net-tools \ub4f1<\/pre>\n\n\n\n
– DHCP \uc11c\ubc84 \uad6c\uc131 <\/strong><\/h6>\n\n\n\n

(\ucc38\uc870 :https:\/\/makepluscode.tistory.com\/165
    https:\/\/www.linux.co.kr\/bbs\/board.php?bo_table=lecture&wr_id=2089)

dhcp \uc11c\ubc84 \uc124\uce58 : sudo apt install isc-dhcp-server
dhcp \uc124\uc815\uc218\uc815 : sudo vi \/etc\/dhcp\/dhcpd.conf
    option domain-name \"rn-test.local\";
    option domain-name-servers 168.126.63.1, 8.8.8.8;

    subnet 10.10.10.0 netmask 255.255.255.0 {
      range 10.10.10.101 10.10.10.200;
      option domain-name-servers 168.126.63.1, 8.8.8.8;
      option routers 10.10.10.1;
    }
dhcp \uc124\uc815\uc218\uc815 : sudo vi \/etc\/default\/isc-dhcp-server
    INTERFACESv4=\"ens192\"
    INTERFACESv6=\"ens192\"

isc-dhcp-server \uc2dc\uc791 : sudo systemctl start isc-dhcp-server
isc-dhcp-server \uc0c1\ud0dc\ud655\uc778 : sudo systemctl status isc-dhcp-server

Client\uc5d0\uc11c DHCP \uc8fc\uc18c \uc218\uc2e0 \ud655\uc778 : 
    Client VM\uc5d0\uc11c IPv4 \uad6c\uc131 DHCP \uc790\ub3d9\uad6c\uc131\ud655\uc778, onboot=yes \ub610\ub294 Automatically
    connect \ud655\uc778 \ud6c4, network \uc7ac\uc2dc\uc791 \ud6c4, IP address 10.10.10.101 \uc774\ud6c4 \uc790\ub3d9\ud560\ub2f9 \ud655\uc778
    netstat -rn \uba85\ub839\uc5b4\uc2dc 10.10.10.1(pNAT Server NIC) GW\ub85c \uad6c\uc131\ud655\uc778
    \/etc\/resolv.conf \ud30c\uc77c\uc5d0 dhcp server \uc124\uc815\uc5d0 \uc9c0\uc815\ub41c dns \uad6c\uc131 \ud655\uc778<\/pre>\n\n\n\n
– pNAT \uad6c\uc131<\/strong><\/h6>\n\n\n\n

\ucc38\uc870\ub9c1\ud06c : https:\/\/linuxhint.com\/configure-nat-on-ubuntu\/
\t  https:\/\/recordnb.tistory.com\/7abb7c259abb7c259

iptables persistent \uc124\uce58 : sudo apt install iptables-persistent
\ubd80\ud305\uc2dc iptable ipv4 \uc2dc\uc791 : sudo systemctl enable iptables.service
\uc2dc\uc791 \ubc0f \ud655\uc778 : sudo systemctl start iptables.service
\tsystemctl status iptables.service
\t
load \uac00\ub2a5\ud55c kernel module \ud655\uc778 : find \/lib\/modules\/$(uname -r) -type f -name '*.ko' |grep iptable
\t\/lib\/modules\/5.15.0-105-generic\/kernel\/net\/ipv4\/netfilter\/iptable_nat.ko
iptable_nat \ubaa8\ub4c8 \ucee4\ub110\uc5d0 \ub85c\ub4dc : 
\t\ud604\uc7ac \ub85c\ub4dc\ub418\uc5b4\uc788\ub294 \ubaa8\ub4c8\ud655\uc778 : lsmod |grep table
\t\tnf_tables             266240  0
\t\tnfnetlink              20480  1 nf_tables
\t\tip_tables              32768  0
\t\tx_tables               53248  1 ip_tables
\t\t
\tiptable_nat \ubaa8\ub4c8 \ub85c\ub4dc : sudo modprobe iptable_nat
\t\ud655\uc778 :  lsmod |grep table
\t\tiptable_nat            16384  0
\t\tnf_nat                 49152  1 iptable_nat
\t\tnf_tables             266240  0
\t\tnfnetlink              20480  1 nf_tables
\t\tip_tables              32768  1 iptable_nat
\t\tx_tables               53248  2 ip_tables,iptable_nat

\t\ub9ac\ubd80\ud305\uc2dc \ud574\ub2f9 \ubaa8\ub4c8 \uc790\ub3d9\uc73c\ub85c \ub85c\ub4dc : sudo vi \/etc\/modules-load.d\/modules.conf
\t\toptions iptable_nat
net.ipv4.ip_forward = 1 \uc801\uc6a9 :  sudo vi \/etc\/sysctl.conf
\tnet.ipv4.ip_forward=1
\t$ sudo sysctl -p

iptables \uac12 \uc801\uc6a9 : sudo iptables -t nat -A POSTROUTING -j MASQUERADE
\t\t\tsudo iptables -A FORWARD -i ens192 -j ACCEPT
\ud655\uc778 : sudo iptables -t nat -L
\tChain PREROUTING (policy ACCEPT)
\ttarget     prot opt source               destination
\t
\tChain INPUT (policy ACCEPT)
\ttarget     prot opt source               destination
\t
\tChain OUTPUT (policy ACCEPT)
\ttarget     prot opt source               destination
\t
\tChain POSTROUTING (policy ACCEPT)
\ttarget     prot opt source               destination
\tMASQUERADE  all  --  anywhere             anywhere
\t
\t$ sudo iptables -L
\tChain INPUT (policy ACCEPT)
\ttarget     prot opt source               destination
\t
\tChain FORWARD (policy ACCEPT)
\ttarget     prot opt source               destination
\tACCEPT     all  --  anywhere             anywhere
\t
\tChain OUTPUT (policy ACCEPT)
\ttarget     prot opt source               destination

iptables config \uc800\uc7a5, \ub9ac\ubd93\uc2dc \uc0ac\uc6a9 : sudo sh -c \"iptables-save > \/etc\/iptables\/rules.v4\"

<\/pre>\n\n\n\n
3. client \ud655\uc778<\/h5>\n\n\n\n
ping www.google.co.kr
PING www.google.co.kr (172.217.25.163) 56(84) bytes of data.
64 bytes from syd09s13-in-f3.1e100.net (172.217.25.163): icmp_seq=1 ttl=106 time=83.9 ms
64 bytes from syd09s13-in-f3.1e100.net (172.217.25.163): icmp_seq=2 ttl=106 time=84.1 ms

[dshan@testvm01 ~]$ curl ifconfig.me
211.168.184.130
<\/pre>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\ub0b4\ubd80 \ub2e4\uc218\uc758 \uc11c\ubc84\uc5d0 \uc0ac\uc124IP\ub97c \ud560\ub2f9\ud558\uace0 \uc678\ubd80\uc778\ud130\ub137\uacfc \uc5f0\uacb0\ub418\ub294 1\ub300\uc758 \uc11c\ubc84\ub97c \ud1b5\ud574 \uc0ac\uc124\ub300\uc5ed\uc5d0 \uc778\ud130\ub137\uc744 \uac00\ub2a5\ud558\uac8c \ud558\uae30\uc704\ud55c pNAT \uad6c\uc131\uc608\uc2dc 1. VMWARE Network \uad6c\uc131 – vSwitch0 -> Port groups […]<\/p>\n","protected":false},"author":1,"featured_media":404,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[117,123,11,122,12],"class_list":["post-403","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-config","tag-internet","tag-linux","tag-nat","tag-ubuntu"],"_links":{"self":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=403"}],"version-history":[{"count":4,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/403\/revisions"}],"predecessor-version":[{"id":408,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/403\/revisions\/408"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/media\/404"}],"wp:attachment":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}