diff options
| author | lijia <[email protected]> | 2020-09-28 09:59:26 +0800 |
|---|---|---|
| committer | lijia <[email protected]> | 2020-09-28 09:59:26 +0800 |
| commit | 81eb7fefeefe2b4234a34aa8d7902f1f97f9cd04 (patch) | |
| tree | ccea17a8c6b0bee9efb2c7c9140ff5a6913726a1 | |
| parent | aee809ae416af03c7d350a6b019f471f9d025849 (diff) | |
将tun网卡的默认ip改为169.254.x.x, 这是DHCP失败后分配的保留地址, 尽量避免和已有网卡IP冲突.
| -rw-r--r-- | roles/active_defence/templates/houyi_cc_setup_env.script.j2 | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/roles/active_defence/templates/houyi_cc_setup_env.script.j2 b/roles/active_defence/templates/houyi_cc_setup_env.script.j2 index 616b17c..5ece930 100644 --- a/roles/active_defence/templates/houyi_cc_setup_env.script.j2 +++ b/roles/active_defence/templates/houyi_cc_setup_env.script.j2 @@ -1,18 +1,18 @@ ip tuntap add dev tun_cc0 mode tun ip tuntap add dev tun_cc1 mode tun ip tuntap add dev tun_cc2 mode tun -ifconfig tun_cc0 192.168.1.254/24 up -ifconfig tun_cc1 192.168.2.254/24 up -ifconfig tun_cc2 192.168.3.254/24 up +ifconfig tun_cc0 169.254.1.254/24 up +ifconfig tun_cc1 169.254.2.254/24 up +ifconfig tun_cc2 169.254.3.254/24 up ip rule del table 1001 ip rule del table 1002 ip rule del table 1003 -ip rule add from 192.168.1.254/32 table 1001 -ip rule add from 192.168.2.254/32 table 1002 -ip rule add from 192.168.3.254/32 table 1003 -ip route add default via 192.168.1.253 table 1001 -ip route add default via 192.168.2.253 table 1002 -ip route add default via 192.168.3.253 table 1003 +ip rule add from 169.254.1.254/32 table 1001 +ip rule add from 169.254.2.254/32 table 1002 +ip rule add from 169.254.3.254/32 table 1003 +ip route add default via 169.254.1.253 table 1001 +ip route add default via 169.254.2.253 table 1002 +ip route add default via 169.254.3.253 table 1003 echo "500000" > /proc/sys/fs/file-max echo "1" > /proc/sys/net/ipv4/tcp_syncookies echo "2" > /proc/sys/net/ipv4/tcp_syn_retries |