Openwrt PPPoE服务器容器化配置指导

一、openwrt 镜像导入

 docker import https://downloads.openwrt.org/releases/18.06.1/targets/x86/64/openwrt-18.06.1-x86-64-generic-rootfs.tar.gz openwrt:18.06.1

root@lxy-HP-EliteBook-840-G3:/home/lxy/桌面# docker image ls
REPOSITORY TAG IMAGE ID CREATED SIZE
openwrt 18.06.1 09b094e0f8ea 4 weeks ago 7.32MB

二查看宿主机网络

root@lxy-HP-EliteBook-840-G3:/home/lxy/桌面# ifconfig

enp0s31f6: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 #

inet6 fe80::567:7b46:af52:e537 prefixlen 64 scopeid 0x20

ether 80:ce:62:a3:70:31 txqueuelen 1000 (以太网)

RX packets 12238065 bytes 6038965416 (6.0 GB)

RX errors 0 dropped 8319 overruns 0 frame 0

TX packets 2037504 bytes 1330549170 (1.3 GB)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

device interrupt 16 memory 0xe1200000-e1220000

enx00e04c680085: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500

ether 00:e0:4c:68:00:85 txqueuelen 1000 (以太网)

RX packets 82098 bytes 16034550 (16.0 MB)

RX errors 0 dropped 63 overruns 0 frame 0

TX packets 16504 bytes 1895727 (1.8 MB)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

三、Docker容器的网络配置

为 docker 创建 macvlan 模式的虚拟网卡，并关联到宿主机。

LAN 口配置

docker network create -d macvlan --subnet=172.16.60.0/24 --gateway=172.16.60.254 --ipv6 --subnet=fe80::/16 --gateway=fe80::1 -o parent=enp0s31f6 -o macvlan_mode=bridge openwrt-LAN

WAN 口配置

docker network create -d macvlan --subnet=192.168.0.0/24 --gateway=192.168.0.254 --ipv6 --subnet=fe81::/16 --gateway=fe81::1 -o parent=enx00e04c680085 -o macvlan_mode=bridge openwrt-WAN

四、启动openwrt容器

docker run -it -d --restart always --network openwrt-LAN --privileged --name openwrt openwrt:18.06.1 /sbin/init

将第二块网卡的挂接到 openwrt

docker network connect openwrt-WAN openwrt

五、修改openwrt容器配置

进入openwrt容器

docker exec -it openwrt /bin/sh

编辑 /etc/config/network配置wan信息

config interface 'wan'option ifname 'eth1'  option proto 'dhcp'option ip6assign '64'

重新加载OpenWRT网络服务

/etc/init.d/network reload

验证是否生效，发现eth1 拿到外网ip

/etc/config # ifconfig

br-lan Link encap:Ethernet HWaddr 02:42:AC:10:3C:03

inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:11 errors:0 dropped:0 overruns:0 frame:0

TX packets:1 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:883 (883.0 B) TX bytes:342 (342.0 B)

eth0 Link encap:Ethernet HWaddr 02:42:AC:10:3C:03

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:11 errors:0 dropped:0 overruns:0 frame:0

TX packets:6 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:1121 (1.0 KiB) TX bytes:1801 (1.7 KiB)

eth1 Link encap:Ethernet HWaddr 02:42:C0:A8:00:02

inet addr:192.200.201.178 Bcast:192.200.207.255 Mask:255.255.240.0

inet6 addr: fde2:b0f1:41c0:10::1/64 Scope:Global

inet6 addr: fe80::42:c0ff:fea8:2/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:807 errors:0 dropped:0 overruns:0 frame:0

TX packets:61 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:123811 (120.9 KiB) TX bytes:6442 (6.2 KiB)

网络检测，能访问外网

PING www.baidu.com (180.101.49.11): 56 data bytes
64 bytes from 180.101.49.11: seq=0 ttl=47 time=18.179 ms
64 bytes from 180.101.49.11: seq=1 ttl=47 time=15.793 ms
64 bytes from 180.101.49.11: seq=2 ttl=47 time=15.436 ms

六、配置ipv4 pppoe server

1.安装rp-pppoe-server

opkg update
opkg install rp-pppoe-server

2.修改/etc/ppp/pppoe-server-options

require-chap
login
lcp-echo-interval 10
lcp-echo-failure 2
mru 1492
mtu 1492
ms-dns 8.8.8.8

3.修改/etc/ppp/chap-secrets，设置pppoe拨号的用户名与密码

#USERNAME PROVIDER PASSWORD IPADDRESS
test * test *

4.修改防火墙规则

iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -j MASQUERADE
iptables -I FORWARD -i ppp0 -j ACCEPT
iptables -I FORWARD -o ppp0 -j ACCEPT

5.启动ipv4 pppoe server

pppoe-server -k -T 60 -I br-lan -N 100 -C Myp -L 10.0.0.1 -R 10.0.0.2

6.下行设备pppoe拨号能拿到地址