Wireguard - 无法使用有线接口

Wireguard - 无法使用有线接口

我已将wireguard 服务器和客户端配置为使用wifi 接口(wlan)工作。通过电缆插入路由器时,我无法在连接的接口 eth0 上建立连接/握手。

我如何允许两个界面同时工作(我希望能够在两个界面之间灵活切换)?

pi@metalhead_4:~/configs $ cat wguardvpn.conf 
[Interface]
PrivateKey = 
Address = 10.226.150.3/24,fd11:5ee:bad:c0de::3/64
DNS = 8.8.8.8, 149.112.112.112

#PreUp   = iptables --table nat --append POSTROUTING --jump MASQUERADE --out interface eth0 
#PreUp   = iptables -t nat -I POSTROUTING -j MASQUERADE -o wg0
PreUp   = iptables -A POSTROUTING -s 10.226.0.0/24 -o et0 -j SNAT --to-source 10.226.150.3 -t nat
#PreDown   = iptables --table nat --delete POSTROUTING --jump MASQUERADE --out interface eth0 
#PreDown   = iptables -t nat -D POSTROUTING -j MASQUERADE -o wg0
PreDown   = iptables -D POSTROUTING -s 10.226.0.0/24 -o et0 -j SNAT --to-source 10.226.150.3 -t nat

[Peer]
PublicKey = 
PresharedKey =
Endpoint = 67.170.120.108:51820
AllowedIPs = 0.0.0.0/0, ::0/0

pi@metalhead_4:~ $ sudo wg

interface: wg0
  public key: 
  private key: (hidden)
  listening port: 51820

peer:
  preshared key: (hidden)
  endpoint: 67.170.120.108:51407
  allowed ips: 10.226.150.3/32, fd11:5ee:bad:c0de::3/128
  latest handshake: 1 hour, 41 minutes, 53 seconds ago
  transfer: 7.00 MiB received, 145.60 MiB sent

peer:
  preshared key: (hidden)
  allowed ips: 10.226.150.2/32, fd11:5ee:bad:c0de::2/128

pi@metalhead_4:~ $ ifconfig

    eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
    inet 10.49.217.61  netmask 255.255.255.0  broadcast 10.49.217.255
    inet6 fe80::d506:9085:74d0:2b8a  prefixlen 64  scopeid 0x20<link>
    inet6 2601:602:8e80:b240:4968:d21a:4abc:fc6d  prefixlen 64  scopeid 0x0<global>
    inet6 2601:602:8e80:b240::e064  prefixlen 128  scopeid 0x0<global>
    ether b8:27:eb:1b:21:4b  txqueuelen 1000  (Ethernet)
    RX packets 1995  bytes 428128 (418.0 KiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 5830  bytes 515199 (503.1 KiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

    lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
    inet 127.0.0.1  netmask 255.0.0.0
    inet6 ::1  prefixlen 128  scopeid 0x10<host>
    loop  txqueuelen 1000  (Local Loopback)
    RX packets 52001  bytes 5167821 (4.9 MiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 52001  bytes 5167821 (4.9 MiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

    wg0: flags=209<UP,POINTOPOINT,RUNNING,NOARP>  mtu 1420
    inet 10.226.150.1  netmask 255.255.255.0  destination 
    10.226.150.1
    inet6 fd11:5ee:bad:c0de::1  prefixlen 64  scopeid 0x0<global>
    unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 1000  (UNSPEC)
    RX packets 57864  bytes 7337748 (6.9 MiB)
    RX errors 12  dropped 0  overruns 0  frame 12
    TX packets 110029  bytes 149649588 (142.7 MiB)
    TX errors 0  dropped 2110 overruns 0  carrier 0  collisions 0

    wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
    inet 192.168.0.2  netmask 255.255.255.0  broadcast 192.168.0.255
    inet6 fe80::484d:7bce:4a83:643a  prefixlen 64  scopeid 0x20<link>
    inet6 2601:602:8e80:b240:8a70:b1dc:4722:ae87  prefixlen 64  scopeid 0x0<global>
    inet6 2601:602:8e80:b240::ffe5  prefixlen 128  scopeid 0x0<global>
    ether b8:27:eb:4e:74:1e  txqueuelen 1000  (Ethernet)
    RX packets 447644  bytes 226415651 (215.9 MiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 430179  bytes 228344598 (217.7 MiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

IP表

    pi@metalhead_4:~ $ sudo iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere             udp dpt:51820 /* wireguard-input-rule */
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
ACCEPT     udp  --  anywhere             anywhere             udp dpt:51820 ctstate NEW
ACCEPT     tcp  --  10.200.200.0/24      anywhere             tcp dpt:domain ctstate NEW
ACCEPT     tcp  --  10.226.150.0/24      anywhere             tcp dpt:domain ctstate NEW
ACCEPT     udp  --  10.226.150.0/24      anywhere             udp dpt:domain ctstate NEW

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             10.226.150.0/24      ctstate RELATED,ESTABLISHED /* wireguard-forward-rule */
ACCEPT     all  --  10.226.150.0/24      anywhere             /* wireguard-forward-rule */
ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere             ctstate NEW

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination  

相关内容