我设置了 pfSense 来连接到192.168.122.0/24
仅接受轻敲连 接。
连接正在成功启动。
pfSense(192.168.1.1/24
)本身可以连接到远程主机:
pfsense# traceroute -n 192.168.122.1
traceroute to 192.168.122.1 (192.168.122.1), 64 hops max, 40 byte packets
1 192.168.122.1 116.968 ms 54.357 ms 52.655 ms
pfSenses LAN 网络上的主机(例如192.168.1.8/24
)连接失败:
lan-machine# traceroute -n 192.168.122.1
traceroute to 192.168.122.1 (192.168.122.1), 30 hops max, 60 byte packets
1 192.168.1.1 0.283 ms 0.303 ms 0.379 ms
更新:从 LAN 向主机执行 ping 操作失败,但是tcpdumppfSense 上显示数据包已正确转发:
lan-machine# ping 192.168.122.1
pfsense# tcpdump -vvi ovpnc4
tcpdump: listening on ovpnc4, link-type EN10MB (Ethernet), capture size 96 bytes
11:54:06.975866 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
192.168.1.8 > 192.168.122.1: ICMP echo request, id 23622, seq 106, length 64
为了使接口路由正确,需要做什么?
(注意需要保留LAN网络192.168.1.0/24
)