¿ù°£ Àα⠰Խù°

°Ô½Ã¹° 160°Ç
   
ÃÊ°£´Ü Bridge Firewall ¼³Á¤
±Û¾´ÀÌ : ÃÖ°í°ü¸®ÀÚ ³¯Â¥ : 2010-01-08 (±Ý) 13:45 Á¶È¸ : 7754
±ÛÁÖ¼Ò :
                          

Ä¿³Î 2.4.x ´ë¿¡¼­´Â º°µµ¿¡ Ä¿³Î¿É¼Ç Ç׸ñÀÌ ÇÊ¿äÇϸç 2.6.x ´ë¿¡¼­´Â ±âº»À¸·Î bridge ¸ðµâÀÌ Æ÷ÇԵǾîÀÖ´Ù....

# YUM À» ÅëÇÑ Brige Uitl ¼³Ä¡...(ºê¸®Áö¸¦ ÄÁÆ®·Ñ ÇÏ´Â À¯Æ¿)
yum install brige-util

[root@localhost ~]# brctl
Usage: brctl [commands]
commands:
        addbr           <bridge>                add bridge
        delbr           <bridge>                delete bridge
        addif           <bridge> <device>       add interface to bridge
        delif           <bridge> <device>       delete interface from bridge
        setageing       <bridge> <time>         set ageing time
        setbridgeprio   <bridge> <prio>         set bridge priority
        setfd           <bridge> <time>         set bridge forward delay
        sethello        <bridge> <time>         set hello time
        setmaxage       <bridge> <time>         set max message age
        setpathcost     <bridge> <port> <cost>  set path cost
        setportprio     <bridge> <port> <prio>  set port priority
        show                                    show a list of bridges
        showmacs        <bridge>                show a list of mac addrs
        showstp         <bridge>                show bridge stp info
        stp             <bridge> {on|off}       turn stp on/off



# ³×Æ®¿öÅ© ÀÎÅÍÆäÀ̽º ¼³Á¤
 - IN / OUT À» À§ÇØ ÃÖ¼Ò 2°³ÀÌ»óÀÇ ÀÌ´õ³Ý Æ÷Æ®°¡ ÇÊ¿äÇÏ´Ù.
 - ³ª´Â Á¢±Ù¿ë Æ÷Æ®¸¦ º°µµ·Î ºÐ¸®Çؼ­ ÃÑ 3°³ÀÇ Æ÷Æ®¸¦ »ç¿ëÇß´Ù.

[root@localhost ~]# brctl addbr br0
[root@localhost ~]# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.000000000000       no

[root@localhost ~]# brctl addif br0 eth1

[root@localhost ~]# brctl addif br0 eth2

[root@localhost ~]# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.0015173a009c       no              eth1
                                                                   eth2

[root@localhost network-scripts]# ifconfig eth1 0.0.0.0 promisc up
[root@localhost network-scripts]# ifconfig eth2 0.0.0.0 promisc up
[root@localhost network-scripts]# ifconfig br0 promisc up

ºê¸´Áö start / stop ½ºÅ©¸³Æ®´Â ¾Ë¾Æ¼­ ÀÛ¼ºÇϽñæ...


ÃÖ°í°ü¸®ÀÚ 2011-01-20 (¸ñ) 17:49
/etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BRIDGE=br0
ONBOOT=yes

/etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
BRIDGE=br0
ONBOOT=yes

/etc/sysconfig/network-scripts/ifcfg-br0
DEVICE=br0
TYPE=Bridge
IPADDR=211.XXX.XXX.XXX
GATEWAY=211.XXX.XXX.XXX
NETMASK=255.255.XXX.XXX
ONBOOT=yes
À̸§ Æнº¿öµå
ºñ¹Ð±Û (üũÇÏ¸é ±Û¾´À̸¸ ³»¿ëÀ» È®ÀÎÇÒ ¼ö ÀÖ½À´Ï´Ù.)
¿ÞÂÊÀÇ ±ÛÀÚ¸¦ ÀÔ·ÂÇϼ¼¿ä.
   

 



 
»çÀÌÆ®¸í : ¸ðÁö¸®³× | ´ëÇ¥ : ÀÌ°æÇö | °³ÀÎÄ¿¹Â´ÏƼ : ·©Å°´åÄÄ ¿î¿µÃ¼Á¦(OS) | °æ±âµµ ¼º³²½Ã ºÐ´ç±¸ | ÀüÀÚ¿ìÆí : mojily°ñ¹ðÀÌchonnom.com Copyright ¨Ï www.chonnom.com www.kyunghyun.net www.mojily.net. All rights reserved.