linux gre隧道創建

實驗環境

兩臺可以相互通信的虛擬機，兩個虛擬機在不通的網段。如下所示

host A:

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:f6:21:28 brd ff:ff:ff:ff:ff:ff

inet 10.10.10.47/24 brd 10.10.10.255 scope global eth0

valid_lft forever preferred_lft forever

host B:

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:14:91:76 brd ff:ff:ff:ff:ff:ff

inet 192.168.0.118/24 brd 192.168.0.255 scope global eth0

valid_lft forever preferred_lft forever

兩臺虛擬機之間可以相互通信

[[email?protected] ~]# ping 10.10.10.47

PING 10.10.10.47 (10.10.10.47) 56(84) bytes of data.

64 bytes from 10.10.10.47: icmp_seq=1 ttl=63 time=1.04 ms

64 bytes from 10.10.10.47: icmp_seq=2 ttl=63 time=0.440 ms

64 bytes from 10.10.10.47: icmp_seq=3 ttl=63 time=0.368 ms

64 bytes from 10.10.10.47: icmp_seq=4 ttl=63 time=0.561 ms

^C

--- 10.10.10.47 ping statistics ---

4 packets transmitted, 4 received, 0% packet loss, time 3001ms

rtt min/avg/max/mdev = 0.368/0.602/1.040/0.262 ms

實驗目的

在host A和host B之間建里gre隧道，另外在機器A 上面配置 2.2.2.2， 在機器B上面配置1.1.1.1 ，然后在A上面能夠ping -I 2.2.2.2 1.1.1.1 能夠通。

實驗步驟

1、在host A(10.10.10.47)上面操作

ip tunnel add gre-test mode gre remote 192.168.0.118 local 10.10.10.47 ttl 255

ip link set gre-test up

ip route add 1.1.1.1/32 dev gre-test

ip addr add 2.2.2.2 dev gre-test

ip link set gre-test down

操作過程入下圖

[[email?protected] ~]# ip tunnel add gre-test mode gre remote 192.168.0.118 local 10.10.10.47 ttl 255

[[email?protected] ~]# ip link set gre-test up

[[email?protected] ~]# ip route add 1.1.1.1/32 dev gre-test

[[email?protected] ~]# ip addr add 2.2.2.2 dev gre-test

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:f6:21:28 brd ff:ff:ff:ff:ff:ff

inet 10.10.10.47/24 brd 10.10.10.255 scope global eth0

valid_lft forever preferred_lft forever

3: [email?protected]: mtu 1476 qdisc noop state DOWN group default qlen 1000

link/gre 0.0.0.0 brd 0.0.0.0

4: [email?protected]: mtu 1462 qdisc noop state DOWN group default qlen 1000

link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff

5: [email?protected]: mtu 1430 qdisc noqueue state UNKNOWN group default qlen 1000

link/gre 10.10.10.47 peer 192.168.0.118

inet 2.2.2.2/32 scope global gre-test

valid_lft forever preferred_lft forever

[[email?protected] ~]# ip r

default via 10.10.10.1 dev eth0

1.1.1.1 dev gre-test scope link

10.10.10.0/24 dev eth0 proto kernel scope link src 10.10.10.47

2、在host B(192.168.0.118)上面操作

ip tunnel add gre-test mode gre remote 10.10.10.47 local 192.168.0.118 ttl 255

ip link set gre-test up

ip route add 2.2.2.2/32 dev gre-test

ip addr add 1.1.1.1 dev gre-test

ip link set gre-test down

[[email?protected] ~]# ip tunnel add gre-test mode gre remote 10.10.10.47 local 192.168.0.118 ttl 255

[[email?protected] ~]# ip link set gre-test up

[[email?protected] ~]# ip route add 2.2.2.2/32 dev gre-test

[[email?protected] ~]# ip addr add 1.1.1.1 dev gre-test

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:14:91:76 brd ff:ff:ff:ff:ff:ff

inet 192.168.0.118/24 brd 192.168.0.255 scope global eth0

valid_lft forever preferred_lft forever

3: [email?protected]: mtu 1476 qdisc noop state DOWN group default qlen 1000

link/gre 0.0.0.0 brd 0.0.0.0

4: [email?protected]: mtu 1462 qdisc noop state DOWN group default qlen 1000

link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff

6: [email?protected]: mtu 1430 qdisc noqueue state UNKNOWN group default qlen 1000

link/gre 192.168.0.118 peer 10.10.10.47

inet 1.1.1.1/32 scope global gre-test

valid_lft forever preferred_lft forever

[[email?protected] ~]# ip r

default via 192.168.0.1 dev eth0

2.2.2.2 dev gre-test scope link

192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.118

實驗結果

[[email?protected] ~]# ping -I 2.2.2.2 1.1.1.1 -c 4

PING 1.1.1.1 (1.1.1.1) from 2.2.2.2 : 56(84) bytes of data.

64 bytes from 1.1.1.1: icmp_seq=1 ttl=64 time=0.635 ms

64 bytes from 1.1.1.1: icmp_seq=2 ttl=64 time=0.702 ms

64 bytes from 1.1.1.1: icmp_seq=3 ttl=64 time=0.588 ms

64 bytes from 1.1.1.1: icmp_seq=4 ttl=64 time=0.565 ms

--- 1.1.1.1 ping statistics ---

4 packets transmitted, 4 received, 0% packet loss, time 3000ms

rtt min/avg/max/mdev = 0.565/0.622/0.702/0.058 ms

還原實驗環境

在host A(10.10.10.47)執行

ip link set gre-test down

ip tunnel del gre-test

[[email?protected] ~]# ip link set gre-test down

[[email?protected] ~]# ip tunnel del gre-test

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:f6:21:28 brd ff:ff:ff:ff:ff:ff

inet 10.10.10.47/24 brd 10.10.10.255 scope global eth0

valid_lft forever preferred_lft forever

3: [email?protected]: mtu 1476 qdisc noop state DOWN group default qlen 1000

link/gre 0.0.0.0 brd 0.0.0.0

4: [email?protected]: mtu 1462 qdisc noop state DOWN group default qlen 1000

link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff

在host B(192.168.0.118)執行

ip link set gre-test down

ip tunnel del gre-test

[[email?protected] ~]# ip link set gre-test down

[[email?protected] ~]# ip tunnel del gre-test

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:14:91:76 brd ff:ff:ff:ff:ff:ff

inet 192.168.0.118/24 brd 192.168.0.255 scope global eth0

valid_lft forever preferred_lft forever

3: [email?protected]: mtu 1476 qdisc noop state DOWN group default qlen 1000

link/gre 0.0.0.0 brd 0.0.0.0

4: [email?protected]: mtu 1462 qdisc noop state DOWN group default qlen 1000

link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff

最后還有一個gre0，不能用

ip link set gre0 down

ip tunnel del gre0

上面兩個命令刪除，否則會報錯

[[email?protected] ~]# ip link set gre0 down

[[email?protected] ~]# ip tunnel del gre0

delete tunnel “gre0” failed: Operation not permitted

需要按照下面的命令刪除：

[[email?protected] ~]# lsmod|grep gre

ip_gre 22931 0

gre 13144 1 ip_gre

ip_tunnel 25163 1 ip_gre

[[email?protected] ~]# rmmod ip_gre

[[email?protected] ~]# ip a

1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: eth0: mtu 1454 qdisc pfifo_fast state UP group default qlen 1000

link/ether 52:54:00:14:91:76 brd ff:ff:ff:ff:ff:ff

inet 192.168.0.118/24 brd 192.168.0.255 scope global eth0

valid_lft forever preferred_lft forever

[[email?protected] ~]#

整個實驗過程比較簡單，自己操作一遍才能把這些基本的命令熟悉起來。

原文：https://www.cnblogs.com/0pandas0/p/12005218.html

創作挑戰賽新人創作獎勵來咯，堅持創作打卡瓜分現金大獎

總結

以上是生活随笔為你收集整理的Linux命令sngre,linux gre隧道创建的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。