PVE增加Nat，端口映射和DHCP服务

1、首先给Proxmox VE规划一个内部使用的nat网段，我使用的是172.16.88.0/24，给Proxmox VE设置172.16.88.1，也就是作为nat网关地址；

2、通过shell编辑Proxmox VE服务器/etc/network/interfaces文件，新增加一个nat网卡，nat网卡名称为vmbr1，修改后的内容如下，请注意enp0s31f6是物理网卡，可以通过ifconfig查看到；

nano -w /etc/network/interfaces

【固定IP】

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto enp0s31f6
iface enp0s31f6 inet manual

auto enx00e04c682754
iface enx00e04c682754 inet manual

# WAN桥接（任选一个物理口）
auto vmbr0
iface vmbr0 inet dhcp
    bridge_ports enx00e04c682754
    bridge_stp off
    bridge_fd 0
iface vmbr0 inet6 dhcp
    bridge_ports enx00e04c682754
    bridge_stp off
    bridge_fd 0

# iface vmbr0 inet static
#     bridge_ports enx00e04c682754
#     address 116.202.172.162/26
#     gateway 116.202.172.129
#     up ip route add 116.202.172.128/26 via 116.202.172.129 dev enx00e04c682754
# iface vmbr0 inet6 static
#     bridge_ports enx00e04c682754
#     address fe80::921b:eee:feda:cb88/64
#     gateway fe80::1

auto vmbr1
iface vmbr1 inet static
        address 172.16.88.1/24
        bridge-ports enp0s31f6
        bridge-stp off
        bridge-fd 0
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up iptables -t nat -A POSTROUTING -s '172.16.88.0/24' -o vmbr0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '172.16.88.0/24' -o vmbr0 -j MASQUERADE

【DHCP】

auto lo
iface lo inet loopback
iface lo inet6 loopback

auto enp0s31f6
iface enp0s31f6 inet manual

auto enx00e04c682754
iface enx00e04c682754 inet manual

# WAN桥接（任选一个物理口）
auto vmbr0
iface vmbr0 inet dhcp
    bridge_ports enx00e04c682754
    bridge_stp off
    bridge_fd 0
iface vmbr0 inet6 dhcp
    bridge_ports enx00e04c682754
    bridge_stp off
    bridge_fd 0

auto vmbr1
iface vmbr1 inet static
        address 172.16.88.1/24
        bridge_ports enp0s31f6
        bridge-stp off
        bridge-fd 0
        post-up sysctl -w net.ipv4.ip_forward=1
        post-up iptables -t nat -A POSTROUTING -s '172.16.88.0/24' -o vmbr0 -j MASQUERADE
        post-down iptables -t nat -D POSTROUTING -s '172.16.88.0/24' -o vmbr0 -j MASQUERADE

【使用WIFI】

安装wifi的支持包

sed -i 's/^deb/# deb/' /etc/apt/sources.list.d/pve-enterprise.list
apt update
apt install wpasupplicant wireless-tools -y

auto wlp0s20f3
iface wlp0s20f3 inet dhcp
    wpa-ssid "talentbaby_5G"
    wpa-psk "password"

替换转发到wifi接口

cp /etc/network/interfaces /etc/network/interfaces.bak
sed -i -E 's/(-[io]) vmbr0/\1 wlp0s20f3/g' /etc/network/interfaces

ifreload -a

3、设置端口转发的网段，网段在前面配置网卡时设置的；

        #these rules forward traffic
        #template
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 172.16.88.10:22
        post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1022 -j DNAT --to 172.16.88.10:22
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1080 -j DNAT --to 172.16.88.10:80
        post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1080 -j DNAT --to 172.16.88.10:80
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 10443 -j DNAT --to 172.16.88.10:443
        post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 10443 -j DNAT --to 172.16.88.10:443
        post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 1088 -j DNAT --to 172.16.88.10:8080
        post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 1088 -j DNAT --to 172.16.88.10:8080

4、安装DHCP服务器，并且配置自动分配IP地址

安装

apt update
apt install dnsmasq

修改配置

nano /etc/dnsmasq.conf

interface=vmbr1
dhcp-range=172.16.88.10,172.16.88.200,12h
dhcp-option=option:router,172.16.88.1    
dhcp-option=option:dns-server,8.8.8.8,1.1.1.1

如果需要分配固定IP

# 为特定设备分配固定 IP
dhcp-host=00:11:22:33:44:55,172.16.88.50
dhcp-host=AA:BB:CC:DD:EE:FF,172.16.88.51

重新启动服务器

systemctl restart dnsmasq