X-Git-Url: http://git.onelab.eu/?p=vsys.git;a=blobdiff_plain;f=factory%2Fsetup-nat;h=64be40b65b84468058778c72a1dcd357da10efd9;hp=5955868453de3c5be719f7ecae3a8a635c6e5119;hb=21f1fe1dd8b0c1073b16cbbde5af3beb55e61fd2;hpb=a93be841a514b499e94dfc7a95ef7140aaa265d5 diff --git a/factory/setup-nat b/factory/setup-nat index 5955868..64be40b 100755 --- a/factory/setup-nat +++ b/factory/setup-nat @@ -1,18 +1,22 @@ #!/bin/sh +x +IP=/sbin/ip + SLICE=$1 SLICEID=`id -u $SLICE` read KEY +modprobe etun + ### Setup etun ETUN0=nat$KEY ETUN1=natx$KEY -ip link add name $ETUN0 type veth peer name $ETUN1 +echo $ETUN0,$ETUN1 > /sys/module/etun/parameters/newif ifconfig $ETUN1 10.0.$KEY.1 up -iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE -iptables -A FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT -iptables -A FORWARD -i $ETUN1 -o eth0 -j ACCEPT +/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE +/sbin/iptables -A FORWARD -i eth0 -o $ETUN1 -m state --state RELATED,ESTABLISHED -j ACCEPT +/sbin/iptables -A FORWARD -i $ETUN1 -o eth0 -j ACCEPT ### Create "grab link" script GRAB=/vsys/local_grab-$ETUN0 @@ -23,7 +27,7 @@ cat > $GRAB < /sys/class/net/$ETUN0/new_ns_pid EOF chmod +x $GRAB @@ -37,12 +41,12 @@ cat > $DELETE < /sys/module/etun/parameters/delif # Clean up files rm -f $GRAB $GRAB.acl