PVE Host 兩張網卡設定 NAT 作法

 vi /etc/sysctl.conf

:
net.ipv4.ip_forward=1
:

sysctl -p

apt update
apt install iptables-persistent

vi /etc/systemd/system/pve-nat.service

[Unit]
Description=PVE NAT Configuration
After=network.target

[Service]
Type=oneshot
ExecStart=/bin/bash -c 'iptables -A FORWARD -i vmbr1 -o vmbr0 -j ACCEPT; iptables -A FORWARD -i vmbr0 -o vmbr1 -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -t nat -A POSTROUTING -s 10.90.90.0/24 -o vmbr0 -j MASQUERADE'
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target

systemctl enable pve-nat.service
systemctl start pve-nat.service

sudo vi /etc/netplan/50-cloud-init.yaml

network:
  version: 2
  ethernets:
    ens18:
      addresses:
      - "10.90.90.29/24"
      nameservers:
        addresses:
        - 1.1.1.1
        - 8.8.8.8
        search: [ichiayi.com]
      routes:
      - to: "default"
        via: "10.90.90.76" 

sudo netplan apply

sudo ip route show

default via 10.90.90.76 dev ens18 proto static
10.90.90.0/24 dev ens18 proto kernel scope link 10.90.90.29
:
: